Search
Find a vulnerability
Search criteria
3 vulnerabilities found for pcu400 by abb
VAR-200809-0017
Vulnerability from variot - Updated: 2025-04-10 23:24Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 (PCU400) 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the (1) IEC60870-5-101 or (2) IEC60870-5-104 communication protocol to the X87 web interface. ABB PCU400 contains a vulnerability which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. ABB Made by company PCU400 Contains a buffer overflow vulnerability. ABB Provided by the company PCU400 Application server IEC-870-5-104 Use protocol RTU(Remote Terminal Unit) When SCADA A gateway device that communicates between servers. The PCU400 'x87' executable version 3.5.5 is vulnerable; other versions may also be affected. Background
Vendor product information:
PCU400 is the modern product when implementing an effective data acquisition network in SCADA-based systems
PCU400, Process Communication Unit 400 forms the communication interface to the network of remote terminal units (RTUs) together with the RCS Application Software located in the application server of a Network Manager SCADA system. The PCU400 can be used as a SCADA front-end, communication gateway for Substation Automation systems or as a standalone protocol converter. Two parts define the Data Acquisition system: * RCS Application, a software package running in the Application Server * PCU400, a front-end converter that implements the protocols and connects the physical lines
PCU 400 can be used in a variety of configurations to cater for different network topologies and different levels of fault tolerance in the system. The alternatives include single or redundant PCU 400 units.
Description
A buffer overflow exists in the component that handles IEC60870-5-101 and IEC60870-5-104 communication protocols. The description of the vulnerability is intentionally limited as this software controls critical national infrastructure.
Impact
An attacker can compromise the server which runs PCU400, which acts as the FEP server of the ABB SCADA system. This vulnerability is another method to carry out the "field to control center" attack vector mentioned in C4's S4 2008 paper "Control System Attack Vectors and Examples: Field Site and Corporate Network", which will allow the attacker to control other RTUs connected to that FEP.
In addition, an attacker can use his control over the FEP server to insert a generic electric grid malware as specified in our SysScan08 presentation, in order to cause harm to the grid.
Both documents are available at http://www.c4-security.com/index-5.html .
Workaround/Fix
The vendor issued a hotfix to resolve this vulnerability.
Additional Information
For additional information please contact us at info_at_c4-security.com. Note that we will respond only to verified utility personnel and governmental agencies. The CVE identifier assigned to this vulnerability by CERT is CVE-2008-2474
Credit
This vulnerability was discovered and exploited by Idan Ofrat of C4. ----------------------------------------------------------------------
Do you need accurate and reliable IDS / IPS / AV detection rules?
Get in-depth vulnerability details: http://secunia.com/binary_analysis/sample_analysis/
TITLE: ABB PCU400 X87 Buffer Overflow Vulnerability
SECUNIA ADVISORY ID: SA32047
VERIFY ADVISORY: http://secunia.com/advisories/32047/
CRITICAL: Moderately critical
IMPACT: DoS, System access
WHERE:
From local network
SOFTWARE: ABB PCU 400 http://secunia.com/advisories/product/19970/
DESCRIPTION: A vulnerability has been reported in ABB PCU400, which can potentially be exploited by malicious people to compromise a vulnerable system.
PROVIDED AND/OR DISCOVERED BY: Idan Ofrat of C4 Security
ORIGINAL ADVISORY: C4 Security: http://archives.neohapsis.com/archives/bugtraq/2008-09/0283.html
OTHER REFERENCES: US-CERT VU#343971: http://www.kb.cert.org/vuls/id/343971
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200809-0017",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "pcu400",
"scope": "eq",
"trust": 1.9,
"vendor": "abb",
"version": "4.6"
},
{
"model": "pcu400",
"scope": "eq",
"trust": 1.9,
"vendor": "abb",
"version": "4.5"
},
{
"model": "pcu400",
"scope": "eq",
"trust": 1.9,
"vendor": "abb",
"version": "4.4"
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "abb",
"version": null
},
{
"model": "pcu400",
"scope": "eq",
"trust": 0.8,
"vendor": "abb",
"version": "4.4 to 4.6"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "pcu400",
"version": "4.4"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "pcu400",
"version": "4.5"
},
{
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "pcu400",
"version": "4.6"
}
],
"sources": [
{
"db": "IVD",
"id": "35bf607c-23cd-11e6-abef-000c29c66e3d"
},
{
"db": "CERT/CC",
"id": "VU#343971"
},
{
"db": "BID",
"id": "31391"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-001777"
},
{
"db": "CNNVD",
"id": "CNNVD-200809-397"
},
{
"db": "NVD",
"id": "CVE-2008-2474"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:abb:pcu400",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2008-001777"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Eyal Udassin and Idan Ofrat of C4 Security",
"sources": [
{
"db": "BID",
"id": "31391"
},
{
"db": "CNNVD",
"id": "CNNVD-200809-397"
}
],
"trust": 0.9
},
"cve": "CVE-2008-2474",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2008-2474",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "35bf607c-23cd-11e6-abef-000c29c66e3d",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "VHN-32599",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2008-2474",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "CARNEGIE MELLON",
"id": "VU#343971",
"trust": 0.8,
"value": "3.28"
},
{
"author": "NVD",
"id": "CVE-2008-2474",
"trust": 0.8,
"value": "High"
},
{
"author": "CNNVD",
"id": "CNNVD-200809-397",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "IVD",
"id": "35bf607c-23cd-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-32599",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "35bf607c-23cd-11e6-abef-000c29c66e3d"
},
{
"db": "CERT/CC",
"id": "VU#343971"
},
{
"db": "VULHUB",
"id": "VHN-32599"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-001777"
},
{
"db": "CNNVD",
"id": "CNNVD-200809-397"
},
{
"db": "NVD",
"id": "CVE-2008-2474"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 (PCU400) 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the (1) IEC60870-5-101 or (2) IEC60870-5-104 communication protocol to the X87 web interface. ABB PCU400 contains a vulnerability which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. ABB Made by company PCU400 Contains a buffer overflow vulnerability. ABB Provided by the company PCU400 Application server IEC-870-5-104 Use protocol RTU(Remote Terminal Unit) When SCADA A gateway device that communicates between servers. \nThe PCU400 \u0027x87\u0027 executable version 3.5.5 is vulnerable; other versions may also be affected. Background\n-----------------\nVendor product information:\n\nPCU400 is the modern product when implementing an effective data acquisition network in SCADA-based systems\n\nPCU400, Process Communication Unit 400 forms the communication interface to the network of remote terminal units (RTUs) together with the RCS Application Software located in the application server of a Network Manager SCADA system. \nThe PCU400 can be used as a SCADA front-end, communication gateway for Substation Automation systems or as a standalone protocol converter. \nTwo parts define the Data Acquisition system:\n * RCS Application, a software package running in the Application Server\n * PCU400, a front-end converter that implements the protocols and connects the physical lines\n\nPCU 400 can be used in a variety of configurations to cater for different network topologies and different levels of fault tolerance in the system. The alternatives include single or redundant PCU 400 units. \n\n \nDescription\n----------------\nA buffer overflow exists in the component that handles IEC60870-5-101 and IEC60870-5-104 communication protocols. \nThe description of the vulnerability is intentionally limited as this software controls critical national infrastructure. \n\n \nImpact\n----------\nAn attacker can compromise the server which runs PCU400, which acts as the FEP server of the ABB SCADA system. \nThis vulnerability is another method to carry out the \"field to control center\" attack vector mentioned in C4\u0027s S4 2008 paper \"Control System Attack Vectors and Examples: Field Site and Corporate Network\", which will allow the attacker to control other RTUs connected to that FEP. \n\nIn addition, an attacker can use his control over the FEP server to insert a generic electric grid malware as specified in our SysScan08 presentation, in order to cause harm to the grid. \n\nBoth documents are available at http://www.c4-security.com/index-5.html . \n\n \nWorkaround/Fix\n-----------------------\nThe vendor issued a hotfix to resolve this vulnerability. \n\n \nAdditional Information\n-------------------------------\nFor additional information please contact us at info_at_c4-security.com. \nNote that we will respond only to verified utility personnel and governmental agencies. \nThe CVE identifier assigned to this vulnerability by CERT is CVE-2008-2474\n\n \nCredit\n--------\nThis vulnerability was discovered and exploited by Idan Ofrat of C4. ----------------------------------------------------------------------\n\nDo you need accurate and reliable IDS / IPS / AV detection rules?\n\nGet in-depth vulnerability details:\nhttp://secunia.com/binary_analysis/sample_analysis/\n\n----------------------------------------------------------------------\n\nTITLE:\nABB PCU400 X87 Buffer Overflow Vulnerability\n\nSECUNIA ADVISORY ID:\nSA32047\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/32047/\n\nCRITICAL:\nModerately critical\n\nIMPACT:\nDoS, System access\n\nWHERE:\n\u003eFrom local network\n\nSOFTWARE:\nABB PCU 400\nhttp://secunia.com/advisories/product/19970/\n\nDESCRIPTION:\nA vulnerability has been reported in ABB PCU400, which can\npotentially be exploited by malicious people to compromise a\nvulnerable system. \n\nPROVIDED AND/OR DISCOVERED BY:\nIdan Ofrat of C4 Security\n\nORIGINAL ADVISORY:\nC4 Security:\nhttp://archives.neohapsis.com/archives/bugtraq/2008-09/0283.html\n\nOTHER REFERENCES:\nUS-CERT VU#343971:\nhttp://www.kb.cert.org/vuls/id/343971\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2008-2474"
},
{
"db": "CERT/CC",
"id": "VU#343971"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-001777"
},
{
"db": "BID",
"id": "31391"
},
{
"db": "IVD",
"id": "35bf607c-23cd-11e6-abef-000c29c66e3d"
},
{
"db": "VULHUB",
"id": "VHN-32599"
},
{
"db": "PACKETSTORM",
"id": "70351"
},
{
"db": "PACKETSTORM",
"id": "70382"
}
],
"trust": 3.06
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-32599",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-32599"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#343971",
"trust": 3.7
},
{
"db": "NVD",
"id": "CVE-2008-2474",
"trust": 3.1
},
{
"db": "BID",
"id": "31391",
"trust": 2.8
},
{
"db": "SECUNIA",
"id": "32047",
"trust": 1.9
},
{
"db": "SREASON",
"id": "4320",
"trust": 1.7
},
{
"db": "CNNVD",
"id": "CNNVD-200809-397",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2008-001777",
"trust": 0.8
},
{
"db": "BUGTRAQ",
"id": "20080925 C4 SECURITY ADVISORY - ABB PCU400 4.4-4.6 REMOTE BUFFER OVERFLOW",
"trust": 0.6
},
{
"db": "IVD",
"id": "35BF607C-23CD-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "PACKETSTORM",
"id": "70351",
"trust": 0.2
},
{
"db": "VULHUB",
"id": "VHN-32599",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "70382",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "35bf607c-23cd-11e6-abef-000c29c66e3d"
},
{
"db": "CERT/CC",
"id": "VU#343971"
},
{
"db": "VULHUB",
"id": "VHN-32599"
},
{
"db": "BID",
"id": "31391"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-001777"
},
{
"db": "PACKETSTORM",
"id": "70351"
},
{
"db": "PACKETSTORM",
"id": "70382"
},
{
"db": "CNNVD",
"id": "CNNVD-200809-397"
},
{
"db": "NVD",
"id": "CVE-2008-2474"
}
]
},
"id": "VAR-200809-0017",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "35bf607c-23cd-11e6-abef-000c29c66e3d"
},
{
"db": "VULHUB",
"id": "VHN-32599"
}
],
"trust": 0.03
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "35bf607c-23cd-11e6-abef-000c29c66e3d"
}
]
},
"last_update_date": "2025-04-10T23:24:56.412000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.abb.com/"
},
{
"title": "PCU400",
"trust": 0.8,
"url": "http://www.abb.com/industries/db0003db004333/c12573e7003305cbc1257074003d0702.aspx"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2008-001777"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-32599"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-001777"
},
{
"db": "NVD",
"id": "CVE-2008-2474"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.9,
"url": "http://www.kb.cert.org/vuls/id/343971"
},
{
"trust": 2.5,
"url": "http://www.securityfocus.com/bid/31391"
},
{
"trust": 1.7,
"url": "http://www.kb.cert.org/vuls/id/ctar-7jtnrx"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/32047"
},
{
"trust": 1.7,
"url": "http://securityreason.com/securityalert/4320"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/archive/1/496739/100/0/threaded"
},
{
"trust": 0.8,
"url": "http://www.digitalbond.com/wiki/index.php/abb_pcu400_remote_buffer_overflow"
},
{
"trust": 0.8,
"url": "http://www.securityfocus.com/archive/1/496739/30/0/threaded"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-2474"
},
{
"trust": 0.8,
"url": "http://jvn.jp/cert/jvnvu343971/index.html"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2008-2474"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/496739/100/0/threaded"
},
{
"trust": 0.3,
"url": "http://www.abb.com/industries/db0003db004333/c12573e7003305cbc1257074003d0702.aspx?productlanguage=us\u0026country=us"
},
{
"trust": 0.3,
"url": "/archive/1/496739"
},
{
"trust": 0.1,
"url": "http://www.c4-security.com/index-5.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2008-2474"
},
{
"trust": 0.1,
"url": "http://secunia.com/binary_analysis/sample_analysis/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/32047/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/product/19970/"
},
{
"trust": 0.1,
"url": "http://archives.neohapsis.com/archives/bugtraq/2008-09/0283.html"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/about_secunia_advisories/"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#343971"
},
{
"db": "VULHUB",
"id": "VHN-32599"
},
{
"db": "BID",
"id": "31391"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-001777"
},
{
"db": "PACKETSTORM",
"id": "70351"
},
{
"db": "PACKETSTORM",
"id": "70382"
},
{
"db": "CNNVD",
"id": "CNNVD-200809-397"
},
{
"db": "NVD",
"id": "CVE-2008-2474"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "35bf607c-23cd-11e6-abef-000c29c66e3d"
},
{
"db": "CERT/CC",
"id": "VU#343971"
},
{
"db": "VULHUB",
"id": "VHN-32599"
},
{
"db": "BID",
"id": "31391"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-001777"
},
{
"db": "PACKETSTORM",
"id": "70351"
},
{
"db": "PACKETSTORM",
"id": "70382"
},
{
"db": "CNNVD",
"id": "CNNVD-200809-397"
},
{
"db": "NVD",
"id": "CVE-2008-2474"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2008-09-29T00:00:00",
"db": "IVD",
"id": "35bf607c-23cd-11e6-abef-000c29c66e3d"
},
{
"date": "2008-09-25T00:00:00",
"db": "CERT/CC",
"id": "VU#343971"
},
{
"date": "2008-09-29T00:00:00",
"db": "VULHUB",
"id": "VHN-32599"
},
{
"date": "2008-09-25T00:00:00",
"db": "BID",
"id": "31391"
},
{
"date": "2008-10-28T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2008-001777"
},
{
"date": "2008-09-25T23:12:37",
"db": "PACKETSTORM",
"id": "70351"
},
{
"date": "2008-09-27T00:07:21",
"db": "PACKETSTORM",
"id": "70382"
},
{
"date": "2008-09-29T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200809-397"
},
{
"date": "2008-09-29T17:17:29.050000",
"db": "NVD",
"id": "CVE-2008-2474"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2009-03-03T00:00:00",
"db": "CERT/CC",
"id": "VU#343971"
},
{
"date": "2018-10-11T00:00:00",
"db": "VULHUB",
"id": "VHN-32599"
},
{
"date": "2008-09-26T17:39:00",
"db": "BID",
"id": "31391"
},
{
"date": "2008-10-28T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2008-001777"
},
{
"date": "2009-02-12T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200809-397"
},
{
"date": "2025-04-09T00:30:58.490000",
"db": "NVD",
"id": "CVE-2008-2474"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200809-397"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "ABB PCU400 \"x87\" Buffer Overflow Vulnerability",
"sources": [
{
"db": "IVD",
"id": "35bf607c-23cd-11e6-abef-000c29c66e3d"
},
{
"db": "CNNVD",
"id": "CNNVD-200809-397"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Buffer overflow",
"sources": [
{
"db": "IVD",
"id": "35bf607c-23cd-11e6-abef-000c29c66e3d"
},
{
"db": "CNNVD",
"id": "CNNVD-200809-397"
}
],
"trust": 0.8
}
}
CVE-2008-2474 (GCVE-0-2008-2474)
Vulnerability from nvd – Published: 2008-09-29 17:00 – Updated: 2024-08-07 09:05
VLAI
EPSS
VEX
Summary
Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 (PCU400) 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the (1) IEC60870-5-101 or (2) IEC60870-5-104 communication protocol to the X87 web interface.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/archive/1/496739/100… | mailing-listx_refsource_BUGTRAQ |
| http://securityreason.com/securityalert/4320 | third-party-advisoryx_refsource_SREASON |
| http://www.kb.cert.org/vuls/id/CTAR-7JTNRX | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/31391 | vdb-entryx_refsource_BID |
| http://secunia.com/advisories/32047 | third-party-advisoryx_refsource_SECUNIA |
| http://www.kb.cert.org/vuls/id/343971 | third-party-advisoryx_refsource_CERT-VN |
Date Public
2008-09-25 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T09:05:30.275Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20080925 C4 Security Advisory - ABB PCU400 4.4-4.6 Remote Buffer Overflow",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/496739/100/0/threaded"
},
{
"name": "4320",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/4320"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/CTAR-7JTNRX"
},
{
"name": "31391",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/31391"
},
{
"name": "32047",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/32047"
},
{
"name": "VU#343971",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/343971"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-09-25T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 (PCU400) 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the (1) IEC60870-5-101 or (2) IEC60870-5-104 communication protocol to the X87 web interface."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-11T19:57:01.000Z",
"orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"shortName": "certcc"
},
"references": [
{
"name": "20080925 C4 Security Advisory - ABB PCU400 4.4-4.6 Remote Buffer Overflow",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/496739/100/0/threaded"
},
{
"name": "4320",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/4320"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.kb.cert.org/vuls/id/CTAR-7JTNRX"
},
{
"name": "31391",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/31391"
},
{
"name": "32047",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/32047"
},
{
"name": "VU#343971",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/343971"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cert@cert.org",
"ID": "CVE-2008-2474",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 (PCU400) 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the (1) IEC60870-5-101 or (2) IEC60870-5-104 communication protocol to the X87 web interface."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20080925 C4 Security Advisory - ABB PCU400 4.4-4.6 Remote Buffer Overflow",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/496739/100/0/threaded"
},
{
"name": "4320",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/4320"
},
{
"name": "http://www.kb.cert.org/vuls/id/CTAR-7JTNRX",
"refsource": "CONFIRM",
"url": "http://www.kb.cert.org/vuls/id/CTAR-7JTNRX"
},
{
"name": "31391",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/31391"
},
{
"name": "32047",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/32047"
},
{
"name": "VU#343971",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/343971"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"assignerShortName": "certcc",
"cveId": "CVE-2008-2474",
"datePublished": "2008-09-29T17:00:00.000Z",
"dateReserved": "2008-05-28T00:00:00.000Z",
"dateUpdated": "2024-08-07T09:05:30.275Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2008-2474 (GCVE-0-2008-2474)
Vulnerability from cvelistv5 – Published: 2008-09-29 17:00 – Updated: 2024-08-07 09:05
VLAI
EPSS
VEX
Summary
Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 (PCU400) 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the (1) IEC60870-5-101 or (2) IEC60870-5-104 communication protocol to the X87 web interface.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/archive/1/496739/100… | mailing-listx_refsource_BUGTRAQ |
| http://securityreason.com/securityalert/4320 | third-party-advisoryx_refsource_SREASON |
| http://www.kb.cert.org/vuls/id/CTAR-7JTNRX | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/31391 | vdb-entryx_refsource_BID |
| http://secunia.com/advisories/32047 | third-party-advisoryx_refsource_SECUNIA |
| http://www.kb.cert.org/vuls/id/343971 | third-party-advisoryx_refsource_CERT-VN |
Date Public
2008-09-25 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T09:05:30.275Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20080925 C4 Security Advisory - ABB PCU400 4.4-4.6 Remote Buffer Overflow",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/496739/100/0/threaded"
},
{
"name": "4320",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/4320"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/CTAR-7JTNRX"
},
{
"name": "31391",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/31391"
},
{
"name": "32047",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/32047"
},
{
"name": "VU#343971",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/343971"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-09-25T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 (PCU400) 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the (1) IEC60870-5-101 or (2) IEC60870-5-104 communication protocol to the X87 web interface."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-11T19:57:01.000Z",
"orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"shortName": "certcc"
},
"references": [
{
"name": "20080925 C4 Security Advisory - ABB PCU400 4.4-4.6 Remote Buffer Overflow",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/496739/100/0/threaded"
},
{
"name": "4320",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/4320"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.kb.cert.org/vuls/id/CTAR-7JTNRX"
},
{
"name": "31391",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/31391"
},
{
"name": "32047",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/32047"
},
{
"name": "VU#343971",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/343971"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cert@cert.org",
"ID": "CVE-2008-2474",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 (PCU400) 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the (1) IEC60870-5-101 or (2) IEC60870-5-104 communication protocol to the X87 web interface."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20080925 C4 Security Advisory - ABB PCU400 4.4-4.6 Remote Buffer Overflow",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/496739/100/0/threaded"
},
{
"name": "4320",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/4320"
},
{
"name": "http://www.kb.cert.org/vuls/id/CTAR-7JTNRX",
"refsource": "CONFIRM",
"url": "http://www.kb.cert.org/vuls/id/CTAR-7JTNRX"
},
{
"name": "31391",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/31391"
},
{
"name": "32047",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/32047"
},
{
"name": "VU#343971",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/343971"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
"assignerShortName": "certcc",
"cveId": "CVE-2008-2474",
"datePublished": "2008-09-29T17:00:00.000Z",
"dateReserved": "2008-05-28T00:00:00.000Z",
"dateUpdated": "2024-08-07T09:05:30.275Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}