CVE-2017-5177

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior. A stack-based buffer overflow vulnerability has been identified, where an attacker with a specially crafted packet could overflow the fixed length buffer. This could allow remote code execution.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-121 CWE-119

Affected software

Vendor	Product	Versions
n/a	VIPA Controls WinPLC7	VIPA Controls WinPLC7

References

http://www.securityfocus.com/bid/96413Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-054-01Third Party Advisory, US Government Resource
https://www.exploit-db.com/exploits/42693/
http://www.securityfocus.com/bid/96413Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-054-01Third Party Advisory, US Government Resource
https://www.exploit-db.com/exploits/42693/

Timeline

Published: May 19, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-51789.8An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and p CVE-2017-51795.4Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.3 allows remote authenticated users to inject arbitrary web script or CVE-2017-51808.8Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt to prevent accessing CVE-2017-51827.5Remote Manager in Open Enterprise Server (OES) allows unauthenticated remote attackers to read any arbitrary file, via a specially crafted U CVE-2017-51836.1NetIQ Access Manager 4.2.2 and 4.3.x before 4.3.1+, when configured as an Identity Server, has XSS in the AssertionConsumerServiceURL field CVE-2017-51845.3A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information (account enumeration).CVE-2017-51857.5A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow remote denial of service.CVE-2017-51867.5Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetI CVE-2017-51878.8A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) in Micro Focus Enterp CVE-2017-51887.5The bs_worker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source CVE-2017-51897.5NetIQ iManager before 3.0.3 delivered a SSL private key in a Java application (JAR file) for authentication to Sentinel, allowing attackers CVE-2017-51903.1NetIQ Access Manager 4.2 before SP3 HF1 and 4.3 before SP1 HF1, when configured as a SAML 2.0 Identity Server with Virtual Attributes, has a