ICONICS Login ActiveX Vulnerability

An attacker with access to the login ActiveX control could exploit a buffer overflow vulnerability to execute arbitrary code on engineering workstations running GENESIS32 or BizViz, potentially allowing them to modify process configurations or gain further access to the control system network.

Organizations running ICONICS GENESIS32 or BizViz for supervisory control and data acquisition (SCADA) or human-machine interface (HMI) functions are affected. This includes water utilities, electric utilities, and other critical infrastructure operators that depend on GENESIS32 or BizViz for monitoring and control of industrial processes.

An attacker crafts a malicious input to the login ActiveX control (likely through a web page or local interface) that triggers a buffer overflow (CWE-119). If the workstation runs vulnerable versions of GENESIS32 or BizViz with ActiveX controls enabled, the overflow could allow code execution with the privileges of the user running the application. This would typically require local or network access to the engineering workstation and user interaction to load a malicious page or file.