Siemens Tecnomatix Factorylink vulnerabilities

2 CVEs affecting Siemens Tecnomatix Factorylink, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-4056, published 2012-01-08.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-4055, published 2012-01-08. High severity, CVSS 9.3. EPSS: 4.6% chance of exploitation in the next 30 days. Buffer overflow in the WebClient ActiveX control in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote attackers to execute arbitrary code via a…
• CVE-2011-4056, published 2012-01-08. Medium severity, CVSS 5.8. EPSS: 1% chance of exploitation in the next 30 days. An unspecified ActiveX control in ActBar.ocx in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote attackers to create or overwrite arbitrary files…