CVE-2011-4535: Buffer overflow in TurboPower Abbrevia before 4.0, as used in ScadaTEC ScadaPhone 5.3.11.1230 and earlier,...

Security readout for executives and security teams

This issue affects software that uses TurboPower Abbrevia before 4.0 to handle ZIP files, including named ScadaTEC products. A malicious ZIP file could crash the application and may allow code execution. Business urgency is highest where these products touch operational technology or process files from external sources. Exposure is likely limited to environments running the named ScadaTEC versions or other applications embedding TurboPower Abbrevia before 4.0 and accepting ZIP files from users, partners, email, removable media, or automated workflows. Prioritize assessment in operational technology environments because the named affected products are SCADA-related and the impact includes application crash with possible code execution. Treat as high priority if ZIP files can reach the software from outside trusted administration paths. Mitigation focus: Inventory ScadaTEC ScadaPhone, ModbusTagServer, and applications using TurboPower Abbrevia.; Upgrade TurboPower Abbrevia to 4.0 or later where vendor-supported.; Check ScadaTEC and US-CERT guidance for product-specific updates or workarounds..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.