Back to Database
Status published
Critical
CVE-2011-4051
CEServer.exe in the CEServer component in the Remote Agent module...
Vulnerability Description
CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-4051
Credits & Attribution
No credits recorded in the NVD database.
References
More from indusoft
View All →CVE-2015-7375
Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers...
High
7.5
CVE-2015-7374
The Remote Agent component in Schneider Electric InduSoft Web Studio...
High
7.5
CVE-2015-1009
Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and...
Low
1.7
CVE-2011-4052
Stack-based buffer overflow in CEServer.exe in the CEServer component in...
Critical
9.3
CVE-2011-1900
Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1...
Critical
10
Affected Vendor
indusoft
View all reports →Affected Software
web studio
Vulnerable Versions:
6.1, 7.0
Timeline
Official Publish:
December 5th, 2011
Last Modified:
September 17th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.