Unrated severityNVD Advisory· Published Jul 29, 2011· Updated Apr 29, 2026

CVE-2011-2962

Description

Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via two unspecified ActiveX controls.

Affected products

Invensys/Wonderware Information Server3 versions
cpe:2.3:a:invensys:wonderware_information_server:3.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:invensys:wonderware_information_server:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:invensys:wonderware_information_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:invensys:wonderware_information_server:4.0:sp1:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.us-cert.gov/control_systems/pdf/ICSA-11-195-01.pdfnvdUS Government Resource
secunia.com/advisories/45476nvd
www.securityfocus.com/bid/48976nvd
exchange.xforce.ibmcloud.com/vulnerabilities/68988nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000