PT-2011-4209
CVE-2011-2959
·
تاريخ النشر
2011-07-29
·
تاريخ التحديث
2011-08-01
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
7-Technologies Interactive Graphical SCADA System (IGSS) versions 9 and earlier
Description
The issue is related to a stack-based buffer overflow in the Open Database Connectivity (ODBC) service, which can be exploited by sending a crafted packet to TCP port 22202. This can cause a denial of service, resulting in a system crash, and potentially allow the execution of arbitrary code.
Recommendations
For versions 9 and earlier, consider restricting access to TCP port 22202 to minimize the risk of exploitation. As a temporary workaround, disabling the Odbcixv9se.exe service may prevent the issue until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾