PT-2011-3225 · 7 Technologies · Igss

Luigi Auriemma · Published 2011-04-05 · Updated 2011-09-22 · CVE-2011-1568

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System (IGSS) versions 9.00.00.11063 and earlier, 9.00.00.11074

Description The issue is related to a format string vulnerability in the logText function in shmemmgr9.dll, which is part of IGSSdataServer.exe. This vulnerability can be exploited by remote attackers to cause a denial of service and possibly execute arbitrary code. The vulnerability is demonstrated using the RMS Reports Delete command and is related to the logging of messages to GSST.LOG.

Recommendations For versions 9.00.00.11063 and earlier, and 9.00.00.11074, consider disabling the logText function in shmemmgr9.dll as a temporary workaround until a patch is available. Restrict access to the RMS Reports Delete command to minimize the risk of exploitation. Avoid using the logging feature to GSST.LOG until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2011-1568

Affected Products

Igss

References · 9

• 🔥 https://exploit-db.com/exploits/17024 · Exploit
• 🔥 http://securityfocus.com/bid/46936 · Exploit
• 🔥 http://exploit-db.com/exploits/17024 · Exploit
• 🔥 http://aluigi.org/adv/igss_6-adv.txt · Exploit
• http://secunia.com/advisories/43849 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1568 · Security Note
• http://vupen.com/english/advisories/2011/0741 · Vendor Advisory
• http://securityreason.com/securityalert/8182 · Note
• http://us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf · Note