CVE-2011-3497

This exploit demonstrates multiple vulnerabilities in Measuresoft ScadaPro, including arbitrary command execution, directory traversal, and stack overflows. The provided PoC includes commands to read files, create files, delete files, and execute arbitrary commands via DLL function calls.

This Metasploit module exploits a directory traversal vulnerability in Measuresoft ScadaPro to execute arbitrary commands via the 'xf' command, leveraging msvcrt.dll's system() function to download and execute a payload.