CVE-2011-2089

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 38.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2011-05-13 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary code via a long string in the argument. NOTE: some of these details are obtained from third party information.

Affected products

ICONICS Bizviz: 9.0, 9.01, 9.1, 9.2, 9.13, 9.20 (+1)
ICONICS GENESIS32: 9.0, 9.1, 9.01, 9.2, 9.13, 9.20 (+1)

References

http://secunia.com/advisories/44417
http://www.exploit-db.com/exploits/17240
http://www.exploit-db.com/exploits/17269
http://www.osvdb.org/72135
http://www.security-assessment.com/files/documents/advisory/ICONICS_WebHMI.pdf
http://www.securityfocus.com/bid/47704
http://www.us-cert.gov/control_systems/pdf/ICSA-11-131-01.pdf
http://www.vupen.com/english/advisories/2011/1174
https://exchange.xforce.ibmcloud.com/vulnerabilities/67267
http://secunia.com/advisories/44417
http://www.exploit-db.com/exploits/17240
http://www.exploit-db.com/exploits/17269

Get alerted when CVE-2011-2089 or the next vulnerability affects your stack