CVE-2011-1565

Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to (1) read (opcode 0x3) or (2) create or write (opcode 0x2) arbitrary files via ..\ (dot dot backslash) sequences to TCP port 12401.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

64.06% chance of exploitation in the next 30 days, 99th percentile

Published

2011-04-05

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/17024

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/igss9_misc.rb

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/17024

References

• CVE Record
• NVD entry

Related

• CVE-2011-1564
• CVE-2011-1566
• CVE-2011-1563
• CVE-2011-1567
• CVE-2011-1557
• CVE-2011-1568