7-Technologies IGSS < 9.0.0.11143 ODBC Remote Memory Corruption

critical Nessus Plugin ID 54645

Language:

Synopsis

The remote Windows host contains a SCADA application that is affected by a memory corruption vulnerability.

Description

The installed version of IGSS from 7-Technologies is earlier than 9.0.0.11143. As such, it potentially has a memory corruption error in the Open Database Connectivity (ODBC) component listening on TCP port 20222.

Using specially crafted packets, an unauthenticated, remote attacker could leverage this issue to execute arbitrary code with administrative privileges.

Solution

Apply the IGSS Update to upgrade to IGSS version 9.0.0.11143 or later.

Plugin Details

Severity: Critical

ID: 54645

File Name: scada_igss_9_0_0_11143.nbin

Version: 1.72

Type: local

Agent: windows

Family: SCADA

Published: 5/25/2011

Updated: 5/20/2024

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2011-2214

Vulnerability Information

CPE: cpe:/a:schneider-electric:interactive_graphical_scada_system

Required KB Items: SCADA/Apps/7T/IGSS/Installed

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 5/24/2011

Vulnerability Publication Date: 5/24/2011

Reference Information

CVE: CVE-2011-2214

BID: 47960

Detections

Analytics