CVE-2011-3321

Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted packet to TCP port 2308.

• CWE-119

• http://cache.automation.siemens.com/dnl/jI/jI0NDY5AAAA_29054992_FAQ/Siemens_Security_Advisory_SSA-460621_V1_2.pdf
• http://secunia.com/advisories/46011Vendor Advisory
• http://support.automation.siemens.com/WW/view/en/29054992
• http://www.us-cert.gov/control_systems/pdf/ICSA-11-244-01.pdfUS Government Resource
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69803
• http://cache.automation.siemens.com/dnl/jI/jI0NDY5AAAA_29054992_FAQ/Siemens_Security_Advisory_SSA-460621_V1_2.pdf
• http://secunia.com/advisories/46011Vendor Advisory
• http://support.automation.siemens.com/WW/view/en/29054992
• http://www.us-cert.gov/control_systems/pdf/ICSA-11-244-01.pdfUS Government Resource
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69803

Published

Sep 16, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3310The Home Page component in Cisco CiscoWorks Common Services …
• CVE-2011-3315Directory traversal vulnerability in Cisco Unified Communica…
• CVE-2011-3317Multiple cross-site scripting (XSS) vulnerabilities in the S…
• CVE-2011-3318Cisco Video Surveillance 2421 and 2500 series cameras with s…
• CVE-2011-3319Buffer overflow in the WRF parsing functionality in the Cisc…
• CVE-2011-3320Cross-site scripting (XSS) vulnerability in the Web Administ…
• CVE-2011-3322Core Server HMI Service (Coreservice.exe) in Scadatec Limite…
• CVE-2011-3323The OSPFv3 implementation in ospf6d in Quagga before 0.99.19…
• CVE-2011-3324The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPF…
• CVE-2011-3325ospf_packet.c in ospfd in Quagga before 0.99.19 allows remot…
• CVE-2011-3326The ospf_flood function in ospf_flood.c in ospfd in Quagga b…
• CVE-2011-3327Heap-based buffer overflow in the ecommunity_ecom2str functi…