CVE-2011-3321

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-09-16 · updated 2026-06-16
Weakness: CWE-119

Description

Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted packet to TCP port 2308.

Affected products

Siemens Simatic Wincc Flexible Runtime: all versions
Siemens Simatic Wincc Runtime: all versions

References

http://cache.automation.siemens.com/dnl/jI/jI0NDY5AAAA_29054992_FAQ/Siemens_Security_Advisory_SSA-460621_V1_2.pdf
http://secunia.com/advisories/46011
http://support.automation.siemens.com/WW/view/en/29054992
http://www.us-cert.gov/control_systems/pdf/ICSA-11-244-01.pdf
https://exchange.xforce.ibmcloud.com/vulnerabilities/69803
http://cache.automation.siemens.com/dnl/jI/jI0NDY5AAAA_29054992_FAQ/Siemens_Security_Advisory_SSA-460621_V1_2.pdf
http://secunia.com/advisories/46011
http://support.automation.siemens.com/WW/view/en/29054992
http://www.us-cert.gov/control_systems/pdf/ICSA-11-244-01.pdf
https://exchange.xforce.ibmcloud.com/vulnerabilities/69803

Get alerted when CVE-2011-3321 or the next vulnerability affects your stack