VULNERABILITY INTELLIGENCE

CVE-2011-4039

CVSS score9.3 HIGH

EPSS probability4.10%

CISA KEVNot currently listed

Published2012-02-10

Last modified2026-06-16

Description

Invensys Wonderware HMI Reports 3.42.835.0304 and earlier, as used in Ocean Data Systems Dream Report before 4.0 and other products, allows user-assisted remote attackers to execute arbitrary code via a malformed file that triggers a "write access violation."