A vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of the Automated Solutions Modbus TCP Slave ActiveX Control. Authentication is not required to exploit this vulnerability. The specific flaw exists within MiniHMI.exe which binds to TCP port 502. When processing malformed Modbus requests on this port a controllable heap corruption can occur which may result in execution of arbitrary code.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/59446/TPTI-07-15.txt
Source: https://packetstormsecurity.com/files/59446/TPTI-07-15.txt.html