RULE(RULE ID:711139)

Rule General Information
Release Date: 2017-05-08
Rule Name: VIPA Controls Winplc7 Recv Stack-based Buffer Overflow Vulnerability (CVE-2017-5177)
Severity:
CVE ID:
Rule Protection Details
Description: A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior. A stack-based buffer overflow vulnerability has been identified, where an attacker with a specially crafted packet could overflow the fixed length buffer. This could allow remote code execution.
Impact: A buffer overflow vulnerability can be triggered by an attacker in the context of the vulnerable product. Further attacks includes arbitrary code execution and denial of service.
Affected OS: Windows
Reference: SecurityFocusBID:96413
ExploitDB:42693
https://ics-cert.us-cert.gov/advisories/ICSA-17-054-01
Solutions
More advisories have been published on the website, please visit for more suggestions:
https://mhj.wetransfer.com/downloads/9be7386d73d68be6dc8d2cbd59ea19b520161122144343/b2e7b0