PT-2011-4974 · 7 Technologies · 7-Technologies Interactive Graphical Scada System

Publicado 2011-12-27 · Atualizado 2017-08-29 · CVE-2011-4537

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System versions 9.0.0.11355 and earlier

Description The issue is related to multiple buffer overflows that can be triggered by remote attackers sending crafted packets to specific TCP ports, potentially leading to arbitrary code execution or a denial of service. The affected TCP ports are 12397 and 12399.

Recommendations For versions 9.0.0.11355 and earlier, update to a version later than 9.0.0.11355 to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-4537

Produtos afetados

7-Technologies Interactive Graphical Scada System

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2011-4537 · Nota de Segurança
• http://us-cert.gov/control_systems/pdf/ICSA-11-355-01-7.pdf · Correção
• http://osvdb.org/77977 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71931 · Nota