PT-2011-3223 · 7 Technologies · Dc.Exe+1

Luigi Auriemma · Published 2011-04-05 · Updated 2012-05-12 · CVE-2011-1566

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System (IGSS) versions 9.00.00.11059 and earlier

Description The issue allows remote attackers to execute arbitrary programs via .. (dot dot backslash) sequences in opcodes (1) 0xa and (2) 0x17 to TCP port 12397. This is a directory traversal vulnerability in dc.exe.

Recommendations For versions 9.00.00.11059 and earlier, as a temporary workaround, consider restricting access to TCP port 12397 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2011-1566

Affected Products

Igss

Dc.Exe

References · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/igss_exec_17.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/igss9_misc.rb · Exploit
• 🔥 https://exploit-db.com/exploits/17024 · Exploit
• 🔥 https://exploit-db.com/exploits/29129 · Exploit
• 🔥 http://securityfocus.com/bid/46936 · Exploit
• 🔥 http://exploit-db.com/exploits/17024 · Exploit
• http://secunia.com/advisories/43849 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1566 · Security Note
• http://vupen.com/english/advisories/2011/0741 · Vendor Advisory
• http://aluigi.org/adv/igss_8-adv.txt · Note
• http://us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf · Note