CVE-2011-4041

CVE-2011-4041 is a critical remote code execution vulnerability affecting Advantech/BroadWin WebAccess, specifically its webvrpcs.exe component. An unauthenticated attacker can exploit this by sending a crafted, long string in an RPC request to TCP port 4592, leading to arbitrary code execution or disclosure of a security-code value. With a CVSS score of 10.0, this vulnerability is highly severe due to its network attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, an ExploitDB entry exists (EDB-35495), indicating public exploit code availability, though there is no evidence of active exploitation or significant community discussion.