Ecava IntegraXor igcom.dll Traversal Arbitrary File Overwrite

high Nessus Plugin ID 59325

Language:

Synopsis

The remote Windows host contains a SCADA application that is affected by a directory traversal vulnerability.

Description

The version of IntegraXor installed on the remote host is earlier than 3.71 (Build 4200). As such, it is reportedly affected by a directory traversal vulnerability in the ActiveX file 'igcom.dll'. User- supplied input is not properly validated and can allow an attacker to overwrite arbitrary files.

Solution

Upgrade to version 3.71.4200.0 or later.

Plugin Details

Severity: High

ID: 59325

File Name: scada_integraxor_3_71_4200.nbin

Version: 1.69

Type: local

Family: SCADA

Published: 6/1/2012

Updated: 5/20/2024

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.8

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 7.7

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/a:ecava:integraxor

Required KB Items: SCADA/Apps/Ecava/IntegraXor/Installed

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 3/22/2012

Vulnerability Publication Date: 3/23/2012

Reference Information

CVE: CVE-2012-0246

BID: 52763

ICSA: 12-083-01

Detections

Analytics