cve/cves/2011/CVE-2011-5007.md

CVE-2011-5007

Description

Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possibly other products, allows remote attackers to execute arbitrary code via a long URI to TCP port 8080.

POC

Reference

• http://www.exploit-db.com/exploits/18187

Github

No PoCs found on GitHub currently.

ExploitDB

• https://www.exploit-db.com/exploits/18240
• https://www.exploit-db.com/exploits/18187

Metasploit

• https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/codesys_web_server.rb