Lucene search

K
cve[email protected]CVE-2011-3495
HistorySep 16, 2011 - 5:26 p.m.

CVE-2011-3495

2011-09-1617:26:14
CWE-22
web.nvd.nist.gov
34
cve-2011-3495
directory traversal
measuresoft scadapro
remote attackers
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.033 Low

EPSS

Percentile

91.4%

Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify, or delete arbitrary files via the (1) RF, (2) wF, (3) UF, or (4) NF command.

Affected configurations

NVD
Node
measuresoftscadaproRange4.0.0
OR
measuresoftscadaproMatch2.1
OR
measuresoftscadaproMatch2.2
OR
measuresoftscadaproMatch2.3
OR
measuresoftscadaproMatch2.4
OR
measuresoftscadaproMatch2.4.1
OR
measuresoftscadaproMatch2.4.2
OR
measuresoftscadaproMatch2.4.3
OR
measuresoftscadaproMatch2.4.4
OR
measuresoftscadaproMatch2.4.5
OR
measuresoftscadaproMatch2.4.6
OR
measuresoftscadaproMatch2.5
OR
measuresoftscadaproMatch2.5.1
OR
measuresoftscadaproMatch2.5.2
OR
measuresoftscadaproMatch2.5.3
OR
measuresoftscadaproMatch2.5.4
OR
measuresoftscadaproMatch2.5.5
OR
measuresoftscadaproMatch2.6.0
OR
measuresoftscadaproMatch2.7.0
OR
measuresoftscadaproMatch2.7.1
OR
measuresoftscadaproMatch2.7.2
OR
measuresoftscadaproMatch2.8.0
OR
measuresoftscadaproMatch2.9.0
OR
measuresoftscadaproMatch3.1.0
OR
measuresoftscadaproMatch3.2.8
OR
measuresoftscadaproMatch3.2.9
OR
measuresoftscadaproMatch3.3.0
OR
measuresoftscadaproMatch3.3.1
OR
measuresoftscadaproMatch3.3.2
OR
measuresoftscadaproMatch3.9.0
OR
measuresoftscadaproMatch3.9.1
OR
measuresoftscadaproMatch3.9.2
OR
measuresoftscadaproMatch3.9.3
OR
measuresoftscadaproMatch3.9.4
OR
measuresoftscadaproMatch3.9.5
OR
measuresoftscadaproMatch3.9.6
OR
measuresoftscadaproMatch3.9.7
OR
measuresoftscadaproMatch3.9.8
OR
measuresoftscadaproMatch3.9.9
OR
measuresoftscadaproMatch3.9.10
OR
measuresoftscadaproMatch3.9.11
OR
measuresoftscadaproMatch3.9.12
OR
measuresoftscadaproMatch3.9.13
OR
measuresoftscadaproMatch3.9.14
OR
measuresoftscadaproMatch3.9.15

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.033 Low

EPSS

Percentile

91.4%

Related for CVE-2011-3495