CVE-2011-3497

Measuresoft ScadaPro 4.0.0 and earlier is affected by CVE-2011-3497 where remote attackers can trigger command execution by abusing the XF function in service.exe (insecure exposed method / directory traversal). The issue, tied to a broader set of vulnerabilities (stack overflow, insecure method ...

CVE-2011-3496

CVE-2011-3496 affects Measuresoft ScadaPro (server component service.exe) 4.0.0 and earlier. The vulnerability allows remote command execution by injecting shell metacharacters into the BF/OF/EF commands, potentially enabling remote code execution. Public indicators of exploitation exist (per lin...

CVE-2011-3495

Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify, or delete arbitrary files via the 1 RF, 2 wF, 3 UF, or 4 NF command...

Stack overflow

Multiple stack-based buffer overflows in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long command to port 11234, as demonstrated with the TF command...

CVE-2011-3490

CVE-2011-3490 affects Measuresoft ScadaPro 4.0.0 and earlier, where the legacy network service on UDP port 11234 suffers multiple stack-based buffer overflows in service.exe. An attacker could remotely crash the server and potentially execute arbitrary code via a long command sent to port 11234 (...

CVE-2011-3490

Multiple stack-based buffer overflows in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long command to port 11234, as demonstrated with the TF command...

Measuresoft ScadaPro Remote Command Execution

This module allows remote attackers to execute arbitrary commands on the affected system by abusing via Directory Traversal attack when using the 'xf' command execute function. An attacker can execute system from msvcrt.dll to upload a backdoor and gain remote code execution. This vulnerability...

Measuresoft ScadaPro 4.0.0 - Remote Command Execution (Metasploit)

$Id: scadaprocmdexe.rb 13737 2011-09-16 08:23:59Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Measuresoft ScadaPro <= 4.0.0 Remote Command Execution

Exploit for windows platform in category remote exploits $Id: scadaprocmdexe.rb 13737 2011-09-16 08:23:59Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Measuresoft ScadaPro 4.0.0 - Multiple Vulnerabilities

Measuresoft ScadaPro 4.0.0 - Multiple Vulnerabilities Luigi Auriemma Application: Measuresoft ScadaPro http://www.measuresoft.com/products/scada-products.aspx Versions: = 4.0.0 Platforms: Windows Bugs: arbitrary commands execution directory traversal in read, write and delete mode tons of stack...

Measuresoft ScadaPro 4.0.0 - Multiple Vulnerabilities

Luigi Auriemma Application: Measuresoft ScadaPro http://www.measuresoft.com/products/scada-products.aspx Versions: = 4.0.0 Platforms: Windows Bugs: arbitrary commands execution directory traversal in read, write and delete mode tons of stack overflow vulnerabilities various Denial of Service...

Measuresoft ScadaPro Vulnerabilities

Overview This Advisory is a follow-up to the Alert titled “ICS-ALERT-11-256-04 Measuresoft ScadaPro” that was published September 13, 2011, on the ICS-CERT website. ICS-CERT is aware of a public report of three vulnerabilities with proof-of-concept PoC exploit code affecting Measuresoft ScadaPro...