CVE-2011-4870: Invensys Wonderware Inbatch

Medium severity, CVSS 6.8. EPSS: 2.4% chance of exploitation in the next 30 days.

Multiple buffer overflows in the (1) GUIControls, (2) BatchObjSrv, and (3) BatchSecCtrl ActiveX controls in Invensys Wonderware InBatch 9.0 and 9.0 SP1, and InBatch 8.1 SP1, 9.0 SP2, and 9.5 Server and Runtime Clients, allow remote attackers to execute arbitrary code via a long string in a property value, a different issue than CVE-2011-3141.

Affected products

• Invensys Wonderware Inbatch: version 8.1 only; version 9.0 only; version 9.5 only

Published 2012-01-08. Last modified 2026-06-16.