PT-2011-4209

CVE-2011-2959

·

Published

2011-07-29

·

Updated

2011-08-01

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System (IGSS) versions 9 and earlier
Description The issue is related to a stack-based buffer overflow in the Open Database Connectivity (ODBC) service, which can be exploited by sending a crafted packet to TCP port 22202. This can cause a denial of service, resulting in a system crash, and potentially allow the execution of arbitrary code.
Recommendations For versions 9 and earlier, consider restricting access to TCP port 22202 to minimize the risk of exploitation. As a temporary workaround, disabling the Odbcixv9se.exe service may prevent the issue until a fix is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾