Exploitation Summary
EIP tracks 2 public exploits for CVE-2011-3496. PoCs published by Metasploit.
AI-analyzed exploit summary This Metasploit module exploits a directory traversal vulnerability in Measuresoft ScadaPro to execute arbitrary commands via the 'xf' command, leveraging msvcrt.dll to upload and execute a backdoor.
Description
service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) BF, (2) OF, or (3) EF command.
Exploits (2)
This Metasploit module exploits a directory traversal vulnerability in Measuresoft ScadaPro to execute arbitrary commands via the 'xf' command, leveraging msvcrt.dll to upload and execute a backdoor.
This is a detailed technical analysis of multiple vulnerabilities in Measuresoft ScadaPro, including arbitrary command execution, directory traversal, and stack overflow vulnerabilities. The writeup includes disassembly snippets, opcode analysis, and proof-of-concept references.