This host is installed with Microsys Promotic and is prone to multiple vulnerabilities.

Successful exploitation allows attackers to cause stack or heap based buffer overflow or disclose sensitive information or execute arbitrary code within the context of the affected application. Impact Level: System/Application

Upgrade to Promotic version 8.1.5 or later, For updates refer to http://www.promotic.eu/en/index.htm

Multiple flaws due to, - Error in PmWebDir object in the web server. - Error in 'vCfg' and 'sID' parameters in 'SaveCfg()'and 'AddTrend()' methods within the PmTrendViewer ActiveX control.

Promotic versions prior to 8.1.5 on Windows

• http://aluigi.altervista.org/adv/promotic_1-adv.txt
• http://ics-cert.us-cert.gov/advisories/ICSA-12-024-02
• http://osvdb.org/76395
• http://osvdb.org/76396
• http://osvdb.org/76397
• http://secunia.com/advisories/46430
• http://www.promotic.eu/en/pmdoc/News.htm#ver80105

---

Updated on 2015-03-25