CVE-2011-3490

CVE-2011-3490 affects Measuresoft ScadaPro 4.0.0 and earlier, where the legacy network service on UDP port 11234 suffers multiple stack-based buffer overflows in service.exe. An attacker could remotely crash the server and potentially execute arbitrary code via a long command sent to port 11234 (...

CVE-2011-3497

Measuresoft ScadaPro 4.0.0 and earlier is affected by CVE-2011-3497 where remote attackers can trigger command execution by abusing the XF function in service.exe (insecure exposed method / directory traversal). The issue, tied to a broader set of vulnerabilities (stack overflow, insecure method ...

CVE-2011-3495

Measuresoft ScadaPro 4.0.0 and earlier are affected by CVE-2011-3495, a directory traversal vulnerability in service.exe that allows remote attackers to read, modify, or delete arbitrary files via the RF, wF, UF, or NF commands. The issue impacts ScadaPro Server (non-credentialed remote access) a...

CVE-2011-3496

CVE-2011-3496 affects Measuresoft ScadaPro (server component service.exe) 4.0.0 and earlier. The vulnerability allows remote command execution by injecting shell metacharacters into the BF/OF/EF commands, potentially enabling remote code execution. Public indicators of exploitation exist (per lin...