PT-2011-4830 · Indusoft · Indusoft Web Studio

Luigi Auriemma · Publicado 2011-11-16 · Atualizado 2011-12-08 · CVE-2011-4051

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions InduSoft Web Studio versions 6.1 through 7.0

Description The issue allows remote attackers to execute arbitrary code without requiring authentication. This is related to vectors involving the creation of a file, loading a DLL, and process control in the CEServer component of the Remote Agent module.

Recommendations For InduSoft Web Studio versions 6.1 through 7.0, consider restricting access to the CEServer.exe component until a patch is available. As a temporary workaround, avoid using the Remote Agent module in InduSoft Web Studio versions 6.1 through 7.0 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2011-4051

ZDI-11-330

Produtos afetados

Indusoft Web Studio

Referências · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/indusoft_webstudio_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/21837 · Exploit
• https://zerodayinitiative.com/advisories/ZDI-11-330 · Nota de Segurança
• http://us-cert.gov/control_systems/pdf/ICSA-11-319-01.pdf · Nota
• http://indusoft.com/hotfixes/hotfixes.php · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2011-4051 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-11-330 · Correção