Exploitation Summary
EIP tracks 4 public exploits for CVE-2011-1566.
PoCs published by Metasploit, Luigi Auriemma, Luigi Auriemma, sinn3r, including Metasploit module exploits/windows/scada/igss9_misc.
AI-analyzed exploit summary This Metasploit module exploits a directory traversal flaw in Interactive Graphical SCADA System v9.00, allowing arbitrary command execution via opcode 0x17. It constructs a malicious packet to trigger command injection in the dc.exe process.
Description
Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to execute arbitrary programs via ..\ (dot dot backslash) sequences in opcodes (1) 0xa and (2) 0x17 to TCP port 12397.
Exploits (4)
This Metasploit module exploits a directory traversal flaw in Interactive Graphical SCADA System v9.00, allowing arbitrary command execution via opcode 0x17. It constructs a malicious packet to trigger command injection in the dc.exe process.
The exploit demonstrates multiple vulnerabilities in IGSSdataServer.exe, including directory traversal and remote stack overflows via crafted packets sent to port 12401. Proof-of-concept code is provided for downloading, uploading, and executing arbitrary files, as well as triggering buffer overflows.
This Metasploit module exploits CVE-2011-1565 and CVE-2011-1566 in 7-Technologies IGSS 9 by writing a payload via Write packets (opcode 0x0D) to the Data Server (port 12401) and executing it via an EXE packet (opcode 0x0A) to the Data Collector (port 12397).
This Metasploit module exploits a directory traversal flaw in Interactive Graphical SCADA System v9.00, allowing arbitrary command execution via opcode 0x17 sent to the dc.exe process. The exploit constructs a malicious packet to trigger command injection.