CVE-2011-1567: Buffer Overflow
Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted (1) ListAll, (2) Write File, (3) ReadFile, (4) Delete, (5) RenameFile, and (6) FileInfo commands in an 0xd opcode; (7) the Add, (8) ReadFile, (9) Write File, (10) Rename, (11) Delete, and (12) Add commands in an RMS report templates (0x7) opcode; and (13) 0x4 command in an STDREP request (0x8) opcode to TCP port 12401.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1567?
CVE-2011-1567 has a high severity due to potential remote code execution and denial of service risks.
How do I fix CVE-2011-1567?
To fix CVE-2011-1567, update to a version of IGSSdataServer.exe later than 9.00.00.11063 or implement mitigations to block the attack vectors.
What systems are affected by CVE-2011-1567?
CVE-2011-1567 affects IGSSdataServer.exe versions 9.00.00.11063 and earlier in the 7-Technologies Interactive Graphical SCADA System.
What kind of attacks can be executed using CVE-2011-1567?
CVE-2011-1567 allows remote attackers to execute denial of service attacks or potentially execute arbitrary code.
Is there a workaround for CVE-2011-1567?
While the recommended action is to upgrade, network segmentation and firewall rules may serve as temporary workarounds to reduce exposure.