CVE-2011-4044 json
An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to…
published 2012-04-03 14 y ago modified 2026-07-09 4 mo ago also EUVD-2011-3996
- cvss
- 5.8
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 26.7%
- EPSS 26.7% chance of exploitation in 30 days, percentile 98%
- public exploits
- 3
- Metasploit, Exploit-DB
Summary
An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to modify files via calls to unknown methods.
Timeline
- First public exploit (EDB-17896)
- Published
Exploit prediction
26.66% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- Metasploit exploit/windows/browser/pcvue_func PcVue 10.0 SV.UIGrdCtrl.1 'LoadObject()/SaveObject()' Trusted DWORD Vulnerability metasploit exploit, average rank, 2011-10-05
- EDB-17975 PcVue 10.0 SV.UIGrdCtrl.1 - 'LoadObject()'/'SaveObject()' Trusted DWORD (Metasploit) remote, 2011-10-12
- EDB-17896 PcVue 10.0 - Multiple Vulnerabilities dos, 2011-09-27
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.8 | AV:N/AC:M/Au:N/C:N/I:P/A:P |
References
-
pcvuesolutions.com
/index.php?option=com_content&view=article&id=244&Itemid=257
vendor-advisory
-
us-cert.gov
/control_systems/pdf/ICSA-11-340-01.pdf
us-government-resource
-
support.pcvuescada.com
/index.php?option=com_k2&view=item&id=512&Itemid=440
broken-link
Sources
- CVE List CVE-2011-4044
- NVD CVE-2011-4044
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.