CVE-2011-3495 in ScadaPro

Riassunto

di MITRE

Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify, or delete arbitrary files via the (1) RF, (2) wF, (3) UF, or (4) NF command.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 16/09/2011
• Divulgazione: 16/09/2011
• Moderazione: accettato
• Voce: VDB-58520
• CPE: pronto
• CWE: CWE-22 (confermato)
• Sfruttamento: Scaricare
• CVSS: 10.0 (NVD)
• EPSS: 0.10804
• KEV: no
• Attività: molto basso
• Settore: Industry, Chemical, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-3495
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-3495
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-3495/