ICS RealFlex RealWin FC_SCRIPT_FCS_STARTPROG Buffer Overflow

Rule ID

1056906

Severity

High

Description

A stack-based buffer overflow vulnerability exists in RealFlex RealWin SCADA server that could be exploited by remote attackers to compromise a vulnerable system.The flaw is due to a boundary error in the handling of "On_FC_SCRIPT_FCS_STARTPROG" requests sent to the server.

Impact

Remote code execution

Recommendation

Update vendor's patch.

IPS Category

Buffer Overflow

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

Reference

Keyword

N/A