CVE-2011-3497: Exposure of Sensitive Information to an Unauthorized Actor

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method...

CVE-2011-3496: Improper Input Validation

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 BF, 2 OF, or 3 EF command...

CVE-2011-3495: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify, or delete arbitrary files via the 1 RF, 2 wF, 3 UF, or 4 NF command...

PT-2011-4478

Name of the Vulnerable Software and Affected Versions Measuresoft ScadaPro versions 4.0.0 and earlier Description The issue allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method. Recommendations For versions 4.0.0 and earlie...

PT-2011-4471

Name of the Vulnerable Software and Affected Versions Measuresoft ScadaPro versions 4.0.0 and earlier Description The issue is related to multiple stack-based buffer overflows in service.exe, allowing remote attackers to cause a denial of service crash and possibly execute arbitrary code via a lo...

Measuresoft ScadaPro 4.0.0 - Remote Command Execution (Metasploit)

$Id: scadaprocmdexe.rb 13737 2011-09-16 08:23:59Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Measuresoft ScadaPro <= 4.0.0 Remote Command Execution

Exploit for windows platform in category remote exploits $Id: scadaprocmdexe.rb 13737 2011-09-16 08:23:59Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Measuresoft ScadaPro 4.0.0 - Multiple Vulnerabilities

Measuresoft ScadaPro 4.0.0 - Multiple Vulnerabilities Luigi Auriemma Application: Measuresoft ScadaPro http://www.measuresoft.com/products/scada-products.aspx Versions: = 4.0.0 Platforms: Windows Bugs: arbitrary commands execution directory traversal in read, write and delete mode tons of stack...

Measuresoft ScadaPro 4.0.0 - Multiple Vulnerabilities

Luigi Auriemma Application: Measuresoft ScadaPro http://www.measuresoft.com/products/scada-products.aspx Versions: = 4.0.0 Platforms: Windows Bugs: arbitrary commands execution directory traversal in read, write and delete mode tons of stack overflow vulnerabilities various Denial of Service...

Measuresoft ScadaPro Vulnerabilities

Overview This Advisory is a follow-up to the Alert titled “ICS-ALERT-11-256-04 Measuresoft ScadaPro” that was published September 13, 2011, on the ICS-CERT website. ICS-CERT is aware of a public report of three vulnerabilities with proof-of-concept PoC exploit code affecting Measuresoft ScadaPro...