What’s Vulnerable › Vulnerabilities

CVE-2011-5088

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-04-18 · updated 2026-06-16

Description

The GENESIS32 IcoSetServer ActiveX control in ICONICS GENESIS32 9.21 and BizViz 9.21 configures the trusted zone on the basis of user input, which allows remote attackers to execute arbitrary code via a crafted web site, related to a "Workbench32/WebHMI component SetTrustedZone Policy vulnerability."

Affected products

• ICONICS Bizviz: 9.21
• ICONICS GENESIS32: 9.21

References

• http://www.us-cert.gov/control_systems/pdf/ICSA-11-182-01.pdf
• http://www.us-cert.gov/control_systems/pdf/ICSA-11-182-01.pdf

Get alerted when CVE-2011-5088 or the next vulnerability affects your stack