virus logo Intrusion Prevention

7-Technologies.IGSS.SCADA.System.Memory.Corruption

description-logoDescription

This indicates an attack attempt against multiple Memory Corruption vulnerabilities in 7-Technologies IGSS (Interactive Graphical SCADA system).
This issue is caused by an error in IGSSdataServer.exe when handling malformed commands. It may allow remote attackers to execute arbitrary code by sending a crafted client request to port 12401.

affected-products-logoAffected Products

7-Technologies IGSS IGSSdataServer.exe 9.00.00.11063 and earlier.

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Currently we are not aware of any vendor supplied patch for this issue.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

References

http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf http://seclists.org/bugtraq/2011/Mar/187 http://www.exploit-db.com/exploits/17024/
ID 26354
Created May 11, 2011
Updated Jul 19, 2022
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
CVE ID CVE-2011-1568 CVE-2011-1567
Exploit Prediction Score 72.6%
Default Action drop
Active
Affected OS Windows
Affected App SCADA