PT-2011-3223 · 7 Technologies · Dc.Exe+1

Luigi Auriemma · Publicado 2011-04-05 · Atualizado 2012-05-12 · CVE-2011-1566

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System (IGSS) versions 9.00.00.11059 and earlier

Description The issue allows remote attackers to execute arbitrary programs via .. (dot dot backslash) sequences in opcodes (1) 0xa and (2) 0x17 to TCP port 12397. This is a directory traversal vulnerability in dc.exe.

Recommendations For versions 9.00.00.11059 and earlier, as a temporary workaround, consider restricting access to TCP port 12397 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2011-1566

Produtos afetados

Igss

Dc.Exe

Referências · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/igss_exec_17.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/igss9_misc.rb · Exploit
• 🔥 https://exploit-db.com/exploits/17024 · Exploit
• 🔥 https://exploit-db.com/exploits/29129 · Exploit
• 🔥 http://securityfocus.com/bid/46936 · Exploit
• 🔥 http://exploit-db.com/exploits/17024 · Exploit
• http://secunia.com/advisories/43849 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-1566 · Nota de Segurança
• http://aluigi.org/adv/igss_8-adv.txt · Nota
• http://vupen.com/english/advisories/2011/0741 · Aviso do Fabricante
• http://us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf · Nota