CVE-2011-3496 | BDVDB-2026-47262 Detail

Description#

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) BF, (2) OF, or (3) EF command.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securityreason.com/securityalert/8382
http://www.exploit-db.com/exploits/17848
http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-04.pdf
http://aluigi.altervista.org/adv/scadapro_1-adv.txt

Exploit#

http://www.exploit-db.com/exploits/17848

History#

Version 12011-09-16Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.