CVE-2010-4557: Invensys Foxboro I/a Series Batch

High severity, CVSS 10.0. EPSS: 12.1% chance of exploitation in the next 30 days.

Buffer overflow in the lm_tcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Series Batch 8.1 and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted request to port 9001.

Affected products

• Invensys Foxboro I/a Series Batch: version 8.1 only
• Invensys Wonderware Inbatch: version 8.1 only; version 9.0 only

Published 2010-12-17. Last modified 2026-06-16.