CVE-2011-4877

HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to cause a denial of service (application crash) by sending crafted data over TCP.

• CWE-20

• http://aluigi.org/adv/winccflex_1-adv.txt
• http://www.exploit-db.com/exploits/18166
• http://www.osvdb.org/77382
• http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdfVendor Advisory
• http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02.pdf
• http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02A.pdf
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdfUS Government Resource
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71451
• http://aluigi.org/adv/winccflex_1-adv.txt
• http://www.exploit-db.com/exploits/18166
• http://www.osvdb.org/77382
• http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdfVendor Advisory
• http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02.pdf
• http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-332-02A.pdf
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdfUS Government Resource
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71451

Published

Feb 3, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-4871Open Automation Software OPC Systems.NET before 5.0 allows r…
• CVE-2011-4872Multiple HTC Android devices including Desire HD FRG83D and …
• CVE-2011-4873Unspecified vulnerability in the server in Certec EDV atvise…
• CVE-2011-4874Use-after-free vulnerability in MICROSYS PROMOTIC before 8.1…
• CVE-2011-4875Stack-based buffer overflow in HmiLoad in the runtime loader…
• CVE-2011-4876Directory traversal vulnerability in HmiLoad in the runtime …
• CVE-2011-4878Directory traversal vulnerability in miniweb.exe in the HMI …
• CVE-2011-4879miniweb.exe in the HMI web server in Siemens WinCC flexible …
• CVE-2011-4880Directory traversal vulnerability in the web server in Certe…
• CVE-2011-4881The web server in Certec atvise webMI2ADS (aka webMI) before…
• CVE-2011-4882The web server in Certec atvise webMI2ADS (aka webMI) before…
• CVE-2011-4883The web server in Certec atvise webMI2ADS (aka webMI) before…