Vulnerability CVE-2011-1566
Published: 2011-04-05   Modified: 2012-02-13

Description:
Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to execute arbitrary programs via ..\ (dot dot backslash) sequences in opcodes (1) 0xa and (2) 0x17 to TCP port 12397.

See advisories in our WLB2 database:
Topic
Author
Date
High
Interactive Graphical SCADA System Remote Command Injection
MC
22.10.2013

Type:

CWE-22

 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
7T -> IGSS 

 References:
http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf
http://www.vupen.com/english/advisories/2011/0741
http://www.securityfocus.com/bid/46936
http://www.exploit-db.com/exploits/17024
http://secunia.com/advisories/43849
http://aluigi.org/adv/igss_8-adv.txt
Copyright 2024, cxsecurity.com

 

Back to Top