CVE-2011-1568 Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System (IGSS) all...
HighCVSS 10.0
EPSS 19.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated using the RMS Reports Delete command, related to the logging of messages to GSST.LOG. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 7t igss | All versions | No fix listed |
References
- aluigi.org exploit
- 43849 third-party-advisory vendor-advisory
- 8182 third-party-advisory
- 17024 exploit
- 46936 exploit vdb-entry
- www.us-cert.gov us-government-resource
- ADV-2011-0741 vdb-entry vendor-advisory