CVEvulnerability
CVE-2011-3497
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-09-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-200
Description
service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method.
Affected configurations
• measuresoft scadapro (<= 4.0.0)
• measuresoft scadapro 2.1
• measuresoft scadapro 2.2
• measuresoft scadapro 2.3
• measuresoft scadapro 2.4
• measuresoft scadapro 2.4.1
• measuresoft scadapro 2.4.2
• measuresoft scadapro 2.4.3
• measuresoft scadapro 2.4.4
• measuresoft scadapro 2.4.5
• measuresoft scadapro 2.4.6
• measuresoft scadapro 2.5
• measuresoft scadapro 2.5.1
• measuresoft scadapro 2.5.2
• measuresoft scadapro 2.5.3
• measuresoft scadapro 2.5.4
• measuresoft scadapro 2.5.5
• measuresoft scadapro 2.6.0
• measuresoft scadapro 2.7.0
• measuresoft scadapro 2.7.1
• measuresoft scadapro 2.7.2
• measuresoft scadapro 2.8.0
• measuresoft scadapro 2.9.0
• measuresoft scadapro 3.1.0
• measuresoft scadapro 3.2.8
• measuresoft scadapro 3.2.9
• measuresoft scadapro 3.3.0
• measuresoft scadapro 3.3.1
• measuresoft scadapro 3.3.2
• measuresoft scadapro 3.9.0
• measuresoft scadapro 3.9.1
• measuresoft scadapro 3.9.2
• measuresoft scadapro 3.9.3
• measuresoft scadapro 3.9.4
• measuresoft scadapro 3.9.5
• measuresoft scadapro 3.9.6
• measuresoft scadapro 3.9.7
• measuresoft scadapro 3.9.8
• measuresoft scadapro 3.9.9
• measuresoft scadapro 3.9.10
• measuresoft scadapro 3.9.11
• measuresoft scadapro 3.9.12
• measuresoft scadapro 3.9.13
• measuresoft scadapro 3.9.14
• measuresoft scadapro 3.9.15
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://aluigi.altervista.org/adv/scadapro_1-adv.txt Exploit
- http://securityreason.com/securityalert/8382 securityreason.com
- http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-04.pdf US Government Resource
- http://aluigi.altervista.org/adv/scadapro_1-adv.txt Exploit
- http://securityreason.com/securityalert/8382 securityreason.com
- http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-04.pdf US Government Resource