Measuresoft ScadaPro xf Command Execution (CVE-2011-3490)

A command execution vulnerability has been reported in Measuresoft ScadaPro...

Measuresoft ScadaPro xf Command Execution

Added: 11/28/2011 CVE: CVE-2011-3490 BID: 49613 OSVDB: 75490 Background ScadaPro is Real Time Data Acquisition software for Microsoft Windows. Problem ScadaPro version 4.0.0 and prior runs a legacy network service on UDP port 11234. This service contains multiple stack overflow and remote command...

CVE-2011-3490

CVE-2011-3490 affects Measuresoft ScadaPro 4.0.0 and earlier, where the legacy network service on UDP port 11234 suffers multiple stack-based buffer overflows in service.exe. An attacker could remotely crash the server and potentially execute arbitrary code via a long command sent to port 11234 (...