Unscored severity · published Sep 16, 2011
CVE-2011-3497
service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed…
–
CVSS
57.1%
EPSS
No
On KEV
Description
service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method.
Exploitation
Is it being used?
Exploit prediction (EPSS)57.1% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Scadapro · Measuresoft
through 4.0.0; 2.1; 2.2; 2.3; 2.4; 2.4.1; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3497
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3497
Exploit
http://aluigi.altervista.org/adv/scadapro_1-adv.txt
securityreason.com
http://securityreason.com/securityalert/8382
US Government Resource
http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-04.pdf
More from Scadapro
5.5
CVE-2024-3746
Measuresoft ScadaPro Improper Access Control
–
CVE-2011-3496
service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) BF, (2) OF, or (3) EF command
–
CVE-2011-3495
Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify, or delete arbitrary files via the (1)…
–
CVE-2011-3490
Multiple stack-based buffer overflows in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute…