CVE-2011-1566

🗓️ 05 Apr 2011 15:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 57 Views🌐 WEB

Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in IGSS allows remote attackers to execute arbitrary programs

Reporter	Title	Published	Views	Family All 16
0day.today	Interactive Graphical SCADA System Remote Command Injection	22 Oct 201300:00	–	zdt
ATTACKERKB	CVE-2011-1566	5 Apr 201115:19	–	attackerkb
Circl	CVE-2011-1566	22 Oct 201300:00	–	circl
Check Point Advisories	7T Interactive Graphical SCADA System Arbitrary File Execution (CVE-2011-1566)	23 Aug 201100:00	–	checkpoint_advisories
Cvelist	CVE-2011-1566	5 Apr 201115:00	–	cvelist
Exploit DB	Interactive Graphical SCADA System - Remote Command Injection (Metasploit)	22 Oct 201300:00	–	exploitdb
Metasploit	7-Technologies IGSS 9 Data Server/Collector Packet Handling Vulnerabilities	30 May 201121:00	–	metasploit
Metasploit	Interactive Graphical SCADA System Remote Command Injection	17 Oct 201319:07	–	metasploit
NVD	CVE-2011-1566	5 Apr 201115:19	–	nvd
OpenVAS	7T Interactive Graphical SCADA System 'dc.exe' Command Injection Vulnerability	25 Sep 201400:00	–	openvas

NVD

Node

Source	Link
us-cert	www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf
vupen	www.vupen.com/english/advisories/2011/0741
securityfocus	www.securityfocus.com/bid/46936
secunia	www.secunia.com/advisories/43849
exploit-db	www.exploit-db.com/exploits/17024
aluigi	www.aluigi.org/adv/igss_8-adv.txt

Parameter	Position	Path	Description	CWE
traversal_sequence	path	tcp/12397	Directory traversal leading to command execution via dc.exe in IGSS over TCP port 12397	CWE-22
payload	path	tcp/12397	Directory traversal leading to command execution via dc.exe in IGSS over TCP port 12397	CWE-22

29 Apr 2026 01:13Current

7.4High risk

Vulners AI Score7.4

CVSS 210

EPSS0.77663