Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

InduSoft Web Studio Remote Agent can run foreign code

CVE-2011-4052 · published 14 years ago
Summary

The Remote Agent component of InduSoft Web Studio versions 6.1 and 7.0 can be tricked into processing a specially crafted file name, causing the program to overflow its memory buffer. This allows an attacker on the network to run their own programs on the affected system. Apply the vendor’s security update or disable the Remote Agent feature until it is patched.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
indusoft web_studio 6.1
7.0
cpe:2.3:a:indusoft:web_studio:6.1:*:*:*:*:*:*:*
Original advisory text
Stack-based buffer overflow in CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 allows remote attackers to execute arbitrary code via a crafted 0...
Stack-based buffer overflow in CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 allows remote attackers to execute arbitrary code via a crafted 0x15 (aka Remove File) operation for a file with a long name.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
6% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published5 Dec 2011
Updated22 Oct 2026
First seen29 Sep 2026
Sources
CVE-2011-4052 · NVD
Track software like this
Free during beta