CVE-2011-1566

Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to execute arbitrary programs via ..\ (dot dot backslash) sequences in opcodes (1) 0xa and (2) 0x17 to TCP port 12397.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

66.98% chance of exploitation in the next 30 days, 99th percentile

Published

2011-04-05

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/17024

Metasploit modules (2)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/igss9_misc.rb
• rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/igss_exec_17.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/29129
• https://www.exploit-db.com/exploits/17024

Security advisories

• http://secunia.com/advisories/43849
• http://www.vupen.com/english/advisories/2011/0741
• http://www.securityfocus.com/bid/46936

References

• CVE Record
• NVD entry