CVE-2012-4711

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 61%

from disclosure to weapon38 days

Published on NVDFeb 15

1st PoC+38d

metasploitNov 20

exploitation probability

61%top 1% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.exe 65.50.2011.18049 in KingView 6.55 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted packet.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/24887unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://ics-cert.us-cert.gov/advisories/ICSA-13-043-02A http://ics-cert.us-cert.gov/pdf/ICSA-13-043-02.pdf