PT-2011-4209
CVE-2011-2959
·
Published
2011-07-29
·
Updated
2011-08-01
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
7-Technologies Interactive Graphical SCADA System (IGSS) versions 9 and earlier
Description
The issue is related to a stack-based buffer overflow in the Open Database Connectivity (ODBC) service, which can be exploited by sending a crafted packet to TCP port 22202. This can cause a denial of service, resulting in a system crash, and potentially allow the execution of arbitrary code.
Recommendations
For versions 9 and earlier, consider restricting access to TCP port 22202 to minimize the risk of exploitation. As a temporary workaround, disabling the Odbcixv9se.exe service may prevent the issue until a fix is available.
Found an issue in the description? Have something to add? Feel free to write us 👾