CVE-2011-4053: Undefined Security Weakness

Untrusted search path vulnerability in 7-Technologies 7T Interactive Graphical SCADA System IGSS before 9.0.0.11291 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

PT-2012-1796

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System versions prior to 9.0.0.11291 Description The issue allows local users to gain privileges via a Trojan horse DLL in the current working directory due to an untrusted search path vulnerability...

PT-2011-4829

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System versions 9.0.0.11200 Description The issue is related to a buffer overflow that can be triggered by remote attackers sending a crafted packet to TCP port 12401, resulting in a denial of service...

PT-2011-4974

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System versions 9.0.0.11355 and earlier Description The issue is related to multiple buffer overflows that can be triggered by remote attackers sending crafted packets to specific TCP ports, potential...

PT-2011-4209

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System IGSS versions 9 and earlier Description The issue is related to a stack-based buffer overflow in the Open Database Connectivity ODBC service, which can be exploited by sending a crafted packet ...

CVE-2011-2959: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Open Database Connectivity ODBC service Odbcixv9se.exe in 7-Technologies Interactive Graphical SCADA System IGSS 9 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted packet to TCP port 22202...

PT-2011-3223

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System IGSS versions 9.00.00.11059 and earlier Description The issue allows remote attackers to execute arbitrary programs via .. dot dot backslash sequences in opcodes 1 0xa and 2 0x17 to TCP port...

PT-2011-3225

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System IGSS versions 9.00.00.11063 and earlier, 9.00.00.11074 Description The issue is related to a format string vulnerability in the logText function in shmemmgr9.dll, which is part of...

PT-2011-3224

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System IGSS version 9.00.00.11063 and earlier Description The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted commands. The affected commands...

CVE-2011-1565: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to 1 read opcode 0x3 or 2 create or write opcode 0x2 arbitrary files via ..\ dot dot backslash sequences to TCP port 12401...

CVE-2011-1568: Use of Externally-Controlled Format String

Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to cause a denial of service and possibly execute arbitrary code, as...

CVE-2011-1567: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System IGSS allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted 1 ListAll, 2 Write File, 3 ReadFile, 4 Delete, ...

CVE-2011-1566: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to execute arbitrary programs via ..\ dot dot backslash sequences in opcodes 1 0xa and 2 0x17 to TCP port 12397...