ID de Prueba:	1.3.6.1.4.1.25623.1.0.804768
Categoría:	Denial of Service
Título:	7T Interactive Graphical SCADA System 'dc.exe' Command Injection Vulnerability
Resumen:	7T Interactive Graphical SCADA System is prone to a remote command execution (RCE) vulnerability.
Descripción:	Summary: 7T Interactive Graphical SCADA System is prone to a remote command execution (RCE) vulnerability. Vulnerability Insight: Flaw is due to dc.exe not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../) supplied via the 0xa and 0x17 opcodes. Vulnerability Impact: Successful exploitation will allow remote attackers to traverse directory and execute arbitrary commands. Affected Software/OS: Interactive Graphical SCADA System dc.exe <= 9.00.00.11059 Solution: Upgrade to version 9.00.00.11083 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1566 BugTraq ID: 46936 http://www.securityfocus.com/bid/46936 http://www.exploit-db.com/exploits/17024 http://aluigi.org/adv/igss_8-adv.txt http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf http://secunia.com/advisories/43849 http://www.vupen.com/english/advisories/2011/0741
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.