Stack-based buffer overflow in the NetBiterConfig utility (NetBiterConfig.exe) 1.3.0 for Intellicom NetBiter WebSCADA allows remote…

Description

Stack-based buffer overflow in the NetBiterConfig utility (NetBiterConfig.exe) 1.3.0 for Intellicom NetBiter WebSCADA allows remote attackers to execute arbitrary code via a long hn (hostname) parameter in a crafted HICP-protocol UDP packet.

Scores

EPSS (exploitation in 30 days)

20.0% · top 2.5% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 10.0.

Weakness

• n/a
• CWE-119 (opens in a new tab)All about CWE-119 and its CVEs

Affected products

• n/a

  • affected n/a

References (7)

• VU#181737 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
• 37325 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• ADV-2009-3542 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• http://blog.48bits.com/2009/12/12/exposing-hms-hicp-protocol-0day-light/ (opens in a new tab)x_refsource_MISCx_transferred
• http://reversemode.com/index.php?option=com_content&task=view&id=65&Itemid=1 (opens in a new tab)x_refsource_MISCx_transferred
• http://support.intellicom.se/getfile.cfm?FID=150&FPID=85 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 20091214 Exposing HMS HICP Protocol + Intellicom NetBiterConfig.exe Remote Buffer Overflow (Not patched) (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2009-4462](https://trackcve.app/badge/CVE-2009-4462.svg)](https://trackcve.app/cve/CVE-2009-4462)

Record last updated 7 Aug 2024, 07:01 UTC.