PT-2011-4471 · Measuresoft · Scadapro

Luigi Auriemma · Publicado 2011-09-16 · Atualizado 2012-02-14 · CVE-2011-3490

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Measuresoft ScadaPro versions 4.0.0 and earlier

Description The issue is related to multiple stack-based buffer overflows in service.exe, allowing remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long command to port 11234. This can be achieved by sending a specific command, such as the TF command, to the affected service.

Recommendations For Measuresoft ScadaPro versions 4.0.0 and earlier, consider restricting access to port 11234 to minimize the risk of exploitation. As a temporary workaround, limit the length of commands accepted by the service.exe to prevent buffer overflows. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-3490

Produtos afetados

Scadapro

Referências · 7

• 🔥 http://exploit-db.com/exploits/17848 · Exploit
• 🔥 http://aluigi.altervista.org/adv/scadapro_1-adv.txt · Exploit
• 🔥 https://exploit-db.com/exploits/17844 · Exploit
• 🔥 https://exploit-db.com/exploits/17848 · Exploit
• http://us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-04.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-3490 · Nota de Segurança
• http://securityreason.com/securityalert/8382 · Nota