CVE-2011-3322

Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password to the Telnet (TCP/23) port, which triggers an out-of-bounds read or write, leading to a stack-based buffer overflow.

• CWE-119

• http://osvdb.org/75371
• http://secunia.com/advisories/45866Vendor Advisory
• http://securityreason.com/securityalert/8374
• http://www.exploit-db.com/exploits/17827Exploit
• http://www.securityfocus.com/bid/49480
• http://www.stratsec.net/Research/Advisories/Procyon-Core-Server-HMI-Remote-Stack-Overflow
• http://www.uscert.gov/control_systems/pdf/ICSA-11-216-01.pdfUS Government Resource
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69632
• http://osvdb.org/75371
• http://secunia.com/advisories/45866Vendor Advisory
• http://securityreason.com/securityalert/8374
• http://www.exploit-db.com/exploits/17827Exploit
• http://www.securityfocus.com/bid/49480
• http://www.stratsec.net/Research/Advisories/Procyon-Core-Server-HMI-Remote-Stack-Overflow
• http://www.uscert.gov/control_systems/pdf/ICSA-11-216-01.pdfUS Government Resource
• https://exchange.xforce.ibmcloud.com/vulnerabilities/69632

Published

Sep 15, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3315Directory traversal vulnerability in Cisco Unified Communica…
• CVE-2011-3317Multiple cross-site scripting (XSS) vulnerabilities in the S…
• CVE-2011-3318Cisco Video Surveillance 2421 and 2500 series cameras with s…
• CVE-2011-3319Buffer overflow in the WRF parsing functionality in the Cisc…
• CVE-2011-3320Cross-site scripting (XSS) vulnerability in the Web Administ…
• CVE-2011-3321Heap-based buffer overflow in the Siemens WinCC Runtime Adva…
• CVE-2011-3323The OSPFv3 implementation in ospf6d in Quagga before 0.99.19…
• CVE-2011-3324The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPF…
• CVE-2011-3325ospf_packet.c in ospfd in Quagga before 0.99.19 allows remot…
• CVE-2011-3326The ospf_flood function in ospf_flood.c in ospfd in Quagga b…
• CVE-2011-3327Heap-based buffer overflow in the ecommunity_ecom2str functi…
• CVE-2011-3328The png_handle_cHRM function in pngrutil.c in libpng 1.5.4, …