CVE-2011-3496

Summary

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) BF, (2) OF, or (3) EF command.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://securityreason.com/securityalert/8382
• http://www.exploit-db.com/exploits/17848
• http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-04.pdf
• http://aluigi.altervista.org/adv/scadapro_1-adv.txt

References

• http://securityreason.com/securityalert/8382
• http://www.exploit-db.com/exploits/17848
• http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-04.pdf
• http://aluigi.altervista.org/adv/scadapro_1-adv.txt

• ←Previous
• Next→