CVE-2011-4055: Siemens Tecnomatix Factorylink

High severity, CVSS 9.3. EPSS: 4.6% chance of exploitation in the next 30 days.

Buffer overflow in the WebClient ActiveX control in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote attackers to execute arbitrary code via a long string in a parameter associated with the location URL.

Affected products

• Siemens Tecnomatix Factorylink: version 6.6.1 only; version 7.5.217 only; version 8.0.2.54 only

Published 2012-01-08. Last modified 2026-06-16.