PT-2011-4974 · 7 Technologies · 7-Technologies Interactive Graphical Scada System

Published 2011-12-27 · Updated 2017-08-29 · CVE-2011-4537

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System versions 9.0.0.11355 and earlier

Description The issue is related to multiple buffer overflows that can be triggered by remote attackers sending crafted packets to specific TCP ports, potentially leading to arbitrary code execution or a denial of service. The affected TCP ports are 12397 and 12399.

Recommendations For versions 9.0.0.11355 and earlier, update to a version later than 9.0.0.11355 to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-4537

Affected Products

7-Technologies Interactive Graphical Scada System

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2011-4537 · Security Note
• http://us-cert.gov/control_systems/pdf/ICSA-11-355-01-7.pdf · Patch
• http://osvdb.org/77977 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71931 · Note