PT-2011-4471 · Measuresoft · Scadapro

Luigi Auriemma · Published 2011-09-16 · Updated 2012-02-14 · CVE-2011-3490

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Measuresoft ScadaPro versions 4.0.0 and earlier

Description The issue is related to multiple stack-based buffer overflows in service.exe, allowing remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long command to port 11234. This can be achieved by sending a specific command, such as the TF command, to the affected service.

Recommendations For Measuresoft ScadaPro versions 4.0.0 and earlier, consider restricting access to port 11234 to minimize the risk of exploitation. As a temporary workaround, limit the length of commands accepted by the service.exe to prevent buffer overflows. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-3490

Affected Products

Scadapro

References · 7

• 🔥 http://exploit-db.com/exploits/17848 · Exploit
• 🔥 http://aluigi.altervista.org/adv/scadapro_1-adv.txt · Exploit
• 🔥 https://exploit-db.com/exploits/17844 · Exploit
• 🔥 https://exploit-db.com/exploits/17848 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-3490 · Security Note
• http://us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-04.pdf · Note
• http://securityreason.com/securityalert/8382 · Note