CVE-2007-4827

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-09-19 · updated 2026-06-16
Weakness: CWE-119

Description

Unspecified vulnerability in the Modbus/TCP Diagnostic function in MiniHMI.exe for the Automated Solutions Modbus Slave ActiveX Control before 1.5 allows remote attackers to corrupt the heap and possibly execute arbitrary code via malformed Modbus requests to TCP port 502.

Affected products

Automated Solutions Modbus Slave Activex Control: through 1.4

References

http://dvlabs.tippingpoint.com/advisory/TPTI-07-15
http://osvdb.org/38259
http://www.automatedsolutions.com/pub/asmbslv/ReadMe.htm
http://www.kb.cert.org/vuls/id/981849
http://www.nessus.org/plugins/index.php?view=single&id=26066
http://www.securityfocus.com/archive/1/479967/100/0/threaded
http://www.securityfocus.com/bid/25713
http://www.securitytracker.com/id?1018707
https://exchange.xforce.ibmcloud.com/vulnerabilities/36677
http://dvlabs.tippingpoint.com/advisory/TPTI-07-15
http://osvdb.org/38259
http://www.automatedsolutions.com/pub/asmbslv/ReadMe.htm

Get alerted when CVE-2007-4827 or the next vulnerability affects your stack