CVEs-PoC/2011/CVE-2011-3497.md

CVE-2011-3497

Description

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method.

POC

Reference

• http://aluigi.altervista.org/adv/scadapro_1-adv.txt
• http://aluigi.altervista.org/adv/scadapro_1-adv.txt
• http://securityreason.com/securityalert/8382
• http://securityreason.com/securityalert/8382

Github

No PoCs found on GitHub currently.