CVE-2011-1566

This Metasploit module exploits a directory traversal flaw in Interactive Graphical SCADA System v9.00, allowing arbitrary command execution via opcode 0x17. It constructs a malicious packet to trigger command injection in the dc.exe process.

The exploit demonstrates multiple vulnerabilities in IGSSdataServer.exe, including directory traversal and remote stack overflows via crafted packets sent to port 12401. Proof-of-concept code is provided for downloading, uploading, and executing arbitrary files, as well as triggering buffer overflows.

This Metasploit module exploits CVE-2011-1565 and CVE-2011-1566 in 7-Technologies IGSS 9 by writing a payload via Write packets (opcode 0x0D) to the Data Server (port 12401) and executing it via an EXE packet (opcode 0x0A) to the Data Collector (port 12397).

This Metasploit module exploits a directory traversal flaw in Interactive Graphical SCADA System v9.00, allowing arbitrary command execution via opcode 0x17 sent to the dc.exe process. The exploit constructs a malicious packet to trigger command injection.