CVE-2011-3496

2011-09-1617:00:00

mitre

www.cve.org

7.6 High

AI Score

Confidence

High

0.109 Low

EPSS

Percentile

95.1%

JSON

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) BF, (2) OF, or (3) EF command.

References

aluigi.altervista.org/adv/scadapro_1-adv.txt

securityreason.com/securityalert/8382

www.exploit-db.com/exploits/17848

www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-04.pdf