7-Technologies IGSS < ODBC Remote Memory Corruption

Critical Nessus Plugin ID 54645


The remote Windows host contains a SCADA application that is affected by a memory corruption vulnerability.


The installed version of IGSS from 7-Technologies is earlier than As such, it potentially has a memory corruption error in the Open Database Connectivity (ODBC) component listening on TCP port 20222.

Using specially crafted packets, an unauthenticated, remote attacker could leverage this issue to execute arbitrary code with administrative privileges.


Apply the IGSS Update to upgrade to IGSS version or later.

See Also



Plugin Details

Severity: Critical

ID: 54645

File Name: scada_igss_9_0_0_11143.nbin

Version: $Revision: 1.24 $

Type: local

Family: SCADA

Published: 2011/05/25

Modified: 2018/01/29

Dependencies: 52961

Risk Information

Risk Factor: Critical


Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:POC/RL:OF/RC:ND

Vulnerability Information

CPE: cpe:/a:schneider-electric:interactive_graphical_scada_system

Required KB Items: SCADA/Apps/7T/IGSS/Installed

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2011/05/24

Vulnerability Publication Date: 2011/05/24

Reference Information

CVE: CVE-2011-2214

BID: 47960

OSVDB: 78611