What’s Vulnerable › Vulnerabilities

CVE-2011-4520

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2013-05-23 · updated 2026-06-16
• Weakness: CWE-119

Description

Heap-based buffer overflow in an ActiveX component in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to cause a denial of service via a crafted web page.

Affected products

• Microsys Promotic: through 8.1.4; 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5 (+12)

References

• http://ics-cert.us-cert.gov/advisories/ICSA-12-024-02
• http://www.promotic.eu/en/pmdoc/News.htm#ver80105
• http://ics-cert.us-cert.gov/advisories/ICSA-12-024-02
• http://www.promotic.eu/en/pmdoc/News.htm#ver80105

Get alerted when CVE-2011-4520 or the next vulnerability affects your stack