CVE-2011-2089

CVE-2011-2089 describes a stack-based buffer overflow in the VersionInfo ActiveX control within the WebHMI subsystem of ICONICS BizViz and GENESIS32 versions 9.x prior to 9.22. This vulnerability allows remote attackers to execute arbitrary code by supplying a long string to the SetActiveXGUID method. With a CVSS score of 9.3, it is considered critical due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV, exploit modules are publicly available in Metasploit and ExploitDB, indicating a high potential for exploitation, despite a lack of community discussion or media coverage.