GCVE - cpe:2.3:a:realflex:realwin:1.06:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:realflex:realwin:1.06:*:*:*:*:*:*:*

part: a version: 1.06 update: *

Vendor	Realflex (`bfd293cb-3365-538b-971c-bcc922620a12`)
Product	Realwin (`e7096b57-8648-5d72-9cf1-8ac6a48511b0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-3004`	vulnerable	2026-06-08 05:02:07.672075	Details available Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDemo before 2.1.13 allow local users to gain privileges via a Trojan horse (1) realwin.dll or (2) keyhook.dll file in the current working directory. Published: 2012-09-08T10:00:00.000Z Updated: 2024-09-17T03:23:37.476Z Open on db.gcve.eu Reference links http://www.us-cert.gov/control_systems/pdf/ICSA-12-251-01.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1564`	vulnerable	2026-06-08 04:58:00.455339	Details available Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via crafted (1) On_FC_MISC_FCS_MSGBROADCAST and (2) On_FC_MISC_FCS_MSGSEND packets, which trigger a heap-based buffer overflow. Published: 2011-04-05T15:00:00.000Z Updated: 2024-08-06T22:28:41.935Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/46937 http://securityreason.com/securityalert/8177 http://aluigi.org/adv/realwin_6-adv.txt http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-04.pdf http://www.exploit-db.com/exploits/17025	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1563`	vulnerable	2026-06-08 04:58:00.454080	Details available Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via (1) a long username in an On_FC_CONNECT_FCS_LOGIN packet, and crafted (2) On_FC_CTAGLIST_FCS_CADDTAG, (3) On_FC_CTAGLIST_FCS_CDELTAG, (4) On_FC_CTAGLIST_FCS_ADDTAGMS, (5) On_FC_RFUSER_FCS_LOGIN, (6) unspecified "On_FC_BINFILE_FCS_*FILE", (7) On_FC_CGETTAG_FCS_GETTELEMETRY, (8) On_FC_CGETTAG_FCS_GETCHANNELTELEMETRY, (9) On_FC_CGETTAG_FCS_SETTELEMETRY, (10) On_FC_CGETTAG_FCS_SETCHANNELTELEMETRY, and (11) On_FC_SCRIPT_FCS_STARTPROG packets to port 910. Published: 2011-04-05T15:00:00.000Z Updated: 2024-08-06T22:28:41.817Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/46937 http://aluigi.org/adv/realwin_2-adv.txt http://aluigi.org/adv/realwin_7-adv.txt http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-04.pdf http://www.exploit-db.com/exploits/17025	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4142`	vulnerable	2026-06-08 04:55:18.988412	Details available Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) SCPC_INITIALIZE, (2) SCPC_INITIALIZE_RF, or (3) SCPC_TXTEVENT packet. NOTE: it was later reported that 1.06 is also affected by one of these requests. Published: 2010-11-01T18:00:00.000Z Updated: 2024-09-16T22:08:27.666Z Open on db.gcve.eu Reference links http://www.exploit-db.com/exploits/15259 http://www.securityfocus.com/bid/44150 http://aluigi.org/adv/realwin_1-adv.txt http://www.exploit-db.com/exploits/15337 http://secunia.com/advisories/41849	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.