4 matches found
CVE-2011-3497
service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method...
10CVSS7.4AI score0.57105EPSS
SaveExploits3References3
Design/Logic Flaw
service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method...
10CVSS8AI score0.57105EPSS
SaveExploits3References3Affected Software1
CVE-2011-3497
Measuresoft ScadaPro 4.0.0 and earlier is affected by CVE-2011-3497 where remote attackers can trigger command execution by abusing the XF function in service.exe (insecure exposed method / directory traversal). The issue, tied to a broader set of vulnerabilities (stack overflow, insecure method ...
10CVSS7.7AI score0.57105EPSS
SaveExploits3References3Affected Software1
20