CVE-2011-1567
Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allow...
- Published
- Apr 5, 2011
- Updated
- Aug 6, 2024
- Assigning CNA
- mitre
- Evidence observed
- Mar 22, 2011
Primary CVSS
nvd · CVSS 2.0
AV:N/AC:L/Au:N/C:C/I:C/A:CHigh · next 30 days
- Percentile
- 99.4%
- Model date
- Oct 12, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted (1) ListAll, (2) Write File, (3) ReadFile, (4) Delete, (5) RenameFile, and (6) FileInfo commands in an 0xd opcode; (7) the Add, (8) ReadFile, (9) Write File, (10) Rename, (11) Delete, and (12) Add commands in an RMS report templates (0x7) opcode; and (13) 0x4 command in an STDREP request (0x8) opcode to TCP port 12401.
Sources
modules/exploits/windows/scada/igss9_igssdataserver_listall.rb
Metasploit Framework modulesDeclared conditions
- platform: Windows($.exploit_windows/scada/igss9_igssdataserver_listall.platform)
- verification: check_not_declared($.exploit_windows/scada/igss9_igssdataserver_listall.check)
modules/exploits/windows/scada/igss9_igssdataserver_rename.rb
Metasploit Framework modulesDeclared conditions
- platform: Windows($.exploit_windows/scada/igss9_igssdataserver_rename.platform)
- verification: check_not_declared($.exploit_windows/scada/igss9_igssdataserver_rename.check)
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.