CVE-2009-4462

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 20.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-12-30 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the NetBiterConfig utility (NetBiterConfig.exe) 1.3.0 for Intellicom NetBiter WebSCADA allows remote attackers to execute arbitrary code via a long hn (hostname) parameter in a crafted HICP-protocol UDP packet.

Affected products

Intellicom Netbiterconfig: 1.3.0

References

http://blog.48bits.com/2009/12/12/exposing-hms-hicp-protocol-0day-light/
http://reversemode.com/index.php?option=com_content&task=view&id=65&Itemid=1
http://support.intellicom.se/getfile.cfm?FID=150&FPID=85
http://www.kb.cert.org/vuls/id/181737
http://www.securityfocus.com/archive/1/508449/100/0/threaded
http://www.securityfocus.com/bid/37325
http://www.vupen.com/english/advisories/2009/3542
http://blog.48bits.com/2009/12/12/exposing-hms-hicp-protocol-0day-light/
http://reversemode.com/index.php?option=com_content&task=view&id=65&Itemid=1
http://support.intellicom.se/getfile.cfm?FID=150&FPID=85
http://www.kb.cert.org/vuls/id/181737
http://www.securityfocus.com/archive/1/508449/100/0/threaded

Get alerted when CVE-2009-4462 or the next vulnerability affects your stack