This host is installed with Sunway ForceControl and is prone to buffer overflow vulnerability.

Successful exploitation will allow remote attackers to cause denial of service or execute arbitrary code. Impact Level: System/Application

Vendor has released a patch to fix the issue, please refer below link for patch information. http://www.sunwayland.com.cn/news_info_.asp?Nid=3593

The flaw exists due to an error in the WebServer component (httpsvr.exe) and can be exploited to cause a heap-based buffer overflow via a specially crafted URL sent in a web request.

Sunway ForceControl 6.1 SP1, SP2, and SP3.

• http://osvdb.org/73124
• http://secunia.com/advisories/45033
• http://www.exploit-db.com/exploits/17721/
• http://www.us-cert.gov/control_systems/pdf/ICSA-11-167-01.pdf

---

Updated on 2017-03-28