Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsy…

published 2011-05-13 15 y ago modified 2026-06-16 4 mo ago also EUVD-2011-2081

cvss: 9.3; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 38.3%; EPSS 38.3% chance of exploitation in 30 days, percentile 98%
public exploits: 3; Metasploit, Exploit-DB

Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary code via a long string in the argument. NOTE: some of these details are obtained from third party information.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-11-131-01 updated 2025-06-09 cvss 9.8

ICONICS GENESIS32 and BizViz ActiveX Stack Overflow

ICONICS BizViz >=9, <=9.21 ICONICS GENESIS32 >=9, <=9.21
affected: mitigation “ICONICS has updated their “Whitepaper on Security Vulnerabilities” (http://iconics.com/certs) to include details of this vulnerability.”

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Timeline

2011-05-03 First public exploit (EDB-17240)
2011-05-13 Published

Exploit prediction

38.32% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

Metasploit exploit/windows/scada/iconics_webhmi_setactivexguid ICONICS WebHMI ActiveX Buffer Overflow metasploit exploit, good rank, 2011-05-05
EDB-17269 ICONICS WebHMI - ActiveX Buffer Overflow (Metasploit) remote, 2011-05-10
EDB-17240 ICONICS WebHMI - ActiveX Stack Overflow remote, 2011-05-03
security-assessment.com http://www.security-assessment.com/files/documents/advisory/ICONICS_WebHMI.pdf referenced PoC, tagged "exploit" by a source, unverified
securityfocus.com http://www.securityfocus.com/bid/47704 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	2.0	9.3	AV:N/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

exploit-db.com /exploits/17240
exploit
exploit-db.com /exploits/17269
exploit
security-assessment.com /files/documents/advisory/ICONICS_WebHMI.pdf
exploit
securityfocus.com /bid/47704
vdb-entry, exploit
secunia.com /advisories/44417
third-party-advisory, vendor-advisory
vupen.com /english/advisories/2011/1174
vdb-entry, vendor-advisory
osvdb.org /72135
vdb-entry
us-cert.gov /control_systems/pdf/ICSA-11-131-01.pdf
us-government-resource
exchange.xforce.ibmcloud.com /vulnerabilities/67267
vdb-entry

Sources

CVE List CVE-2011-2089
NVD CVE-2011-2089

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary