Schneider Electric Interactive Graphical SCADA System dc.exe Unspecified Buffer Overflow

critical Nessus Plugin ID 64296

Language:

Synopsis

The remote Windows host contains a SCADA application that is affected by a buffer overflow vulnerability.

Description

The installed version of IGSS is 9.x earlier than 9.0.0.12331 / 10.x earlier than 10.0.0.12320. It is, therefore, reportedly affected by an unspecified buffer overflow vulnerability.

By sending specially crafted packets to the dc.exe service on TCP port 12397, an unauthenticated, remote attacker could trigger a buffer overflow resulting in arbitrary code execution or a denial of service condition (service crash).

Solution

Upgrade to IGSS version 9.0.0.12331 / 10.0.0.12320 or later.

Plugin Details

Severity: Critical

ID: 64296

File Name: scada_igss_9_0_0_12331.nbin

Version: 1.71

Type: local

Agent: windows

Family: SCADA

Published: 1/30/2013

Updated: 5/20/2024

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.4

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2013-0657

Vulnerability Information

CPE: cpe:/a:schneider-electric:interactive_graphical_scada_system

Required KB Items: SCADA/Apps/7T/IGSS/Installed

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 1/10/2013

Vulnerability Publication Date: 1/10/2013

Exploitable With

Core Impact

Reference Information

CVE: CVE-2013-0657

BID: 57449

ICSA: 13-018-01

Detections

Analytics