CVE-2011-10032
CRITICAL EPSS 66.2%
Published Aug 30, 202510mo ago · Modified Jun 16, 20261w ago
9.3 CVSS 4.0
Published Aug 30, 2025 10mo ago
Last Modified Jun 16, 2026 1w ago
Description
Sunway ForceControl version 6.1 SP3 and earlier contains a stack-based buffer overflow vulnerability in the SNMP NetDBServer service, which listens on TCP port 2001. The flaw is triggered when the service receives a specially crafted packet using opcode 0x57 with an overly long payload. Due to improper bounds checking during packet parsing, attacker-controlled data overwrites the Structured Exception Handler (SEH), allowing arbitrary code execution in the context of the service. This vulnerability can be exploited remotely without authentication and may lead to full system compromise on affected Windows hosts.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X
Threat Intelligence
EPSS Exploit Probability
66.2% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-121
References 7
- aluigi.altervista.org http://aluigi.altervista.org/adv/forcecontrol_1-adv.txt
- sunwayland.com http://www.sunwayland.com/
- raw.githubusercontent.com https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/scada/sunway_force_control_netdbsrv.rb
- web.archive.org https://web.archive.org/web/20110611043512/http://www.sunwayland.com.cn/pro.asp
- exploit-db.com https://www.exploit-db.com/exploits/18448
- fortiguard.com https://www.fortiguard.com/encyclopedia/ips/29449
- vulncheck.com https://www.vulncheck.com/advisories/sunway-forcecontrol-snmp-netdbserver-opcode
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.