VULNERABILITY INTELLIGENCE

CVE-2011-4051

CVSS score10 HIGH
EPSS probability69.09%
CISA KEVNot currently listed
Published2011-12-05
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require authentication, which allows remote attackers to execute arbitrary code via vectors related to creation of a file, loading a DLL, and process control.

Weakness classification

  • CWE-287: Improper Authentication

Primary references