CVE-2011-3497

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

57.10% chance of exploitation in the next 30 days, 99th percentile

Published

2011-09-16

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/scadapro_cmdexe.rb

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/17844

References

• CVE Record
• NVD entry

Related

• CVE-2011-3496
• CVE-2011-3498
• CVE-2011-3495
• CVE-2011-3499
• CVE-2011-3494
• CVE-2011-3501