RealFlex RealWin FC_SCRIPT_FCS_STARTPROG Buffer Overflow

Added: 04/11/2011 CVE: CVE-2011-1563 BID: 46937 Background RealWin is a Supervisory Control and Data Acquisition SCADA server which is distributed by DATAC. Problem A buffer overflow vulnerability in RealWin Server allows remote attackers to execute arbitrary commands by sending a long, specially...

CVE-2011-1568

Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to cause a denial of service and possibly execute arbitrary code, as...

CVE-2011-1566

Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to execute arbitrary programs via ..\ dot dot backslash sequences in opcodes 1 0xa and 2 0x17 to TCP port 12397...

Directory traversal

Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to execute arbitrary programs via ..\ dot dot backslash sequences in opcodes 1 0xa and 2 0x17 to TCP port 12397...

CVE-2011-1567

Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System IGSS allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted 1 ListAll, 2 Write File, 3 ReadFile, 4 Delete, ...

PT-2011-3223

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System IGSS versions 9.00.00.11059 and earlier Description The issue allows remote attackers to execute arbitrary programs via .. dot dot backslash sequences in opcodes 1 0xa and 2 0x17 to TCP port...

PT-2011-3225

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System IGSS versions 9.00.00.11063 and earlier, 9.00.00.11074 Description The issue is related to a format string vulnerability in the logText function in shmemmgr9.dll, which is part of...

PT-2011-3224

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System IGSS version 9.00.00.11063 and earlier Description The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted commands. The affected commands...

CVE-2011-1567: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System IGSS allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted 1 ListAll, 2 Write File, 3 ReadFile, 4 Delete, ...

CVE-2011-1568: Use of Externally-Controlled Format String

Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to cause a denial of service and possibly execute arbitrary code, as...

CVE-2011-1566: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to execute arbitrary programs via ..\ dot dot backslash sequences in opcodes 1 0xa and 2 0x17 to TCP port 12397...

CVE-2011-1565: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to 1 read opcode 0x3 or 2 create or write opcode 0x2 arbitrary files via ..\ dot dot backslash sequences to TCP port 12401...

IGSS Data Server Directory Traversal Arbitrary File Access

Binary data scadaigssdirtraversal.nbin...

7-Technologies IGSS 9.00.00.11059 - Multiple Vulnerabilities

7-Technologies IGSS 9.00.00.11059 - Multiple Vulnerabilities Sources: http://aluigi.org/adv/igss1-adv.txt http://aluigi.org/adv/igss2-adv.txt http://aluigi.org/adv/igss3-adv.txt http://aluigi.org/adv/igss4-adv.txt http://aluigi.org/adv/igss5-adv.txt http://aluigi.org/adv/igss6-adv.txt...

Interactive Graphical SCADA System Remote Command Injection

This module abuses a directory traversal flaw in Interactive Graphical SCADA System v9.00. In conjunction with the traversal flaw, if opcode 0x17 is sent to the dc.exe process, an attacker may be able to execute arbitrary system commands. Module Options msf use exploit/windows/scada/igss/exec17 m...

RealWin SCADA System Buffer Overflow Vulnerabilities

This host is running RealWin SCADA system and is prone to buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbrealwinscadabofvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ RealWin SCADA System Buffer Overflow Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone...

RealWin SCADA System <= 2.1 Build 6.1.10.10 Multiple Buffer Overflow Vulnerabilities

RealWin SCADA system is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Richard Clarke Highlights Overlapping Techniques in Cyber Crime, Espionage, and Warfare

The difference between cyber crime, cyber espionage, and cyber war is often just a matter of a few keystrokes, as they use the same techniques. Richard Clarke, chairman of Good Harbor Consulting, highlighted this during his keynote at the RSA Europe 2010 conference in London. Cyber Crime Cyber...

DATAC RealWin SCADA 1.06 Buffer Overflow

Exploit Title: RealWin SCADA System SEH Overwrite Date: 10-27-10 Author: Blake Software Link: http://www.realflex.com/products/realwin/realwin.php Version: 1.06 Tested on: Windows XP SP3 running in VMware Workstation rfx import socket, sys if lensys.argv!= 3: print "\n Usage: %s \n" % sys.argv0...

CVE-2010-2772: Use of Hard-coded Credentials

Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain privileges, as demonstrated in the wild in July 2010 by the Stuxnet worm, a different vulnerability than CVE-2010-2568...