CVE-2011-3496

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) BF, (2) OF, or (3) EF command.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

14.37% chance of exploitation in the next 30 days, 97th percentile

Published

2011-09-16

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/17848

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/17848
• https://www.exploit-db.com/exploits/17844

References

• CVE Record
• NVD entry