PT-2011-3224 · 7 Technologies · Igss

Publicado 2011-04-05 · Atualizado 2011-09-22 · CVE-2011-1567

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System (IGSS) version 9.00.00.11063 and earlier

Description The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted commands. The affected commands include ListAll, Write File, ReadFile, Delete, RenameFile, and FileInfo in an 0xd opcode, as well as Add, ReadFile, Write File, Rename, Delete, and Add commands in an RMS report templates (0x7) opcode, and the 0x4 command in an STDREP request (0x8) opcode to TCP port 12401.

Recommendations For 7-Technologies Interactive Graphical SCADA System (IGSS) version 9.00.00.11063 and earlier, consider restricting access to the IGSSdataServer.exe service to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the affected commands in opcodes 0xd, 0x7, and 0x8 to prevent potential crashes or code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-1567

Produtos afetados

Igss

Referências · 18

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/igss9_igssdataserver_rename.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/igss9_igssdataserver_listall.rb · Exploit
• 🔥 http://aluigi.org/adv/igss_2-adv.txt · Exploit
• 🔥 http://exploit-db.com/exploits/17024 · Exploit
• 🔥 http://aluigi.org/adv/igss_7-adv.txt · Exploit
• 🔥 http://aluigi.org/adv/igss_4-adv.txt · Exploit
• 🔥 https://exploit-db.com/exploits/17024 · Exploit
• 🔥 http://aluigi.org/adv/igss_5-adv.txt · Exploit
• 🔥 https://exploit-db.com/exploits/17374 · Exploit
• 🔥 https://exploit-db.com/exploits/17300 · Exploit
• 🔥 http://aluigi.org/adv/igss_3-adv.txt · Exploit
• http://securityreason.com/securityalert/8251 · Nota
• http://secunia.com/advisories/43849 · Aviso do Fabricante
• http://securityfocus.com/bid/46936 · Nota
• http://vupen.com/english/advisories/2011/0741 · Aviso do Fabricante