Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2016-2024 and is owned by Tenable, Inc. or an Affiliate thereof.SCADA_APP_IGSS_ODBC_ICSA-11-018-02.NBIN
HistoryFeb 29, 2016 - 12:00 a.m.

7-Technologies IGSS < 9.0.0.11143 ODBC Invalid Structure RCE

2016-02-2900:00:00
This script is Copyright (C) 2016-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
19
JSON

The 7-Technologies / Schneider-Electric Interactive Graphical SCADA System (IGSS) application installed on the remote Windows host is a version prior to 9.0.0.11143. It is, therefore, affected by a memory corruption issue in the ODBC service due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this, via a specially crafted structure in a packet sent to to TCP port 22202, to cause a stack-based buffer overflow, resulting in the execution arbitrary code with administrative privileges.

Binary data scada_app_igss_odbc_icsa-11-018-02.nbin
VendorProductVersionCPE
schneider-electricinteractive_graphical_scada_systemcpe:/a:schneider-electric:interactive_graphical_scada_system
JSON