Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service (…

1. 2010-10-15 First public exploit (Metasploit exploit/windows/scada/realwin_scpc_initialize)
2. 2010-11-01 Published

62.99% chance of exploitation in the next 30 days, higher than 99.2% of all scored CVEs (FIRST EPSS, 2026-11-09).

• Metasploit exploit/windows/scada/realwin_scpc_txtevent DATAC RealWin SCADA Server SCPC_TXTEVENT Buffer Overflow metasploit exploit, great rank, 2010-11-18
• Metasploit exploit/windows/scada/realwin_scpc_initialize DATAC RealWin SCADA Server SCPC_INITIALIZE Buffer Overflow metasploit exploit, great rank, 2010-10-15
• Metasploit exploit/windows/scada/realwin_scpc_initialize_rf DATAC RealWin SCADA Server SCPC_INITIALIZE_RF Buffer Overflow metasploit exploit, great rank, 2010-10-15
• EDB-16384 DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - SCPC_TXTEVENT Buffer Overflow (Metasploit) remote, 2010-11-24
• EDB-16383 DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - SCPC_INITIALIZE_RF Buffer Overflow (Metasploit) remote, 2010-11-30
• EDB-16382 DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - SCPC_INITIALIZE Buffer Overflow (Metasploit) remote, 2010-11-30
• EDB-15337 DATAC RealWin SCADA Server 1.06 - Remote Buffer Overflow remote, 2010-10-27
• EDB-15259 DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - Buffer Overflow dos, 2010-10-15
• securityfocus.com http://www.securityfocus.com/bid/44150 referenced PoC, tagged "exploit" by a source, unverified
• aluigi.org http://aluigi.org/adv/realwin_1-adv.txt referenced PoC, tagged "exploit" by a source, unverified

Weakness

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

• exploit-db.com /exploits/15259

  exploit

• exploit-db.com /exploits/15337

  exploit

• securityfocus.com /bid/44150

  vdb-entry, exploit

• aluigi.org /adv/realwin_1-adv.txt

  exploit

• secunia.com /advisories/41849

  third-party-advisory, vendor-advisory

• CVE List CVE-2010-4142
• NVD CVE-2010-4142

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.