Lucene search

K
cve[email protected]CVE-2011-3497
HistorySep 16, 2011 - 5:26 p.m.

CVE-2011-3497

2011-09-1617:26:14
CWE-200
web.nvd.nist.gov
95
cve-2011-3497
service.exe
measuresoft scadapro
remote attackers
arbitrary dll functions
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.229 Low

EPSS

Percentile

96.6%

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method.

Affected configurations

NVD
Node
measuresoftscadaproRange4.0.0
OR
measuresoftscadaproMatch2.1
OR
measuresoftscadaproMatch2.2
OR
measuresoftscadaproMatch2.3
OR
measuresoftscadaproMatch2.4
OR
measuresoftscadaproMatch2.4.1
OR
measuresoftscadaproMatch2.4.2
OR
measuresoftscadaproMatch2.4.3
OR
measuresoftscadaproMatch2.4.4
OR
measuresoftscadaproMatch2.4.5
OR
measuresoftscadaproMatch2.4.6
OR
measuresoftscadaproMatch2.5
OR
measuresoftscadaproMatch2.5.1
OR
measuresoftscadaproMatch2.5.2
OR
measuresoftscadaproMatch2.5.3
OR
measuresoftscadaproMatch2.5.4
OR
measuresoftscadaproMatch2.5.5
OR
measuresoftscadaproMatch2.6.0
OR
measuresoftscadaproMatch2.7.0
OR
measuresoftscadaproMatch2.7.1
OR
measuresoftscadaproMatch2.7.2
OR
measuresoftscadaproMatch2.8.0
OR
measuresoftscadaproMatch2.9.0
OR
measuresoftscadaproMatch3.1.0
OR
measuresoftscadaproMatch3.2.8
OR
measuresoftscadaproMatch3.2.9
OR
measuresoftscadaproMatch3.3.0
OR
measuresoftscadaproMatch3.3.1
OR
measuresoftscadaproMatch3.3.2
OR
measuresoftscadaproMatch3.9.0
OR
measuresoftscadaproMatch3.9.1
OR
measuresoftscadaproMatch3.9.2
OR
measuresoftscadaproMatch3.9.3
OR
measuresoftscadaproMatch3.9.4
OR
measuresoftscadaproMatch3.9.5
OR
measuresoftscadaproMatch3.9.6
OR
measuresoftscadaproMatch3.9.7
OR
measuresoftscadaproMatch3.9.8
OR
measuresoftscadaproMatch3.9.9
OR
measuresoftscadaproMatch3.9.10
OR
measuresoftscadaproMatch3.9.11
OR
measuresoftscadaproMatch3.9.12
OR
measuresoftscadaproMatch3.9.13
OR
measuresoftscadaproMatch3.9.14
OR
measuresoftscadaproMatch3.9.15

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.229 Low

EPSS

Percentile

96.6%