Ecava IntegraXor igcom.dll Traversal Arbitrary File Overwrite

High Nessus Plugin ID 59325

Synopsis

The remote Windows host contains a SCADA application that is affected by a directory traversal vulnerability.

Description

The version of IntegraXor installed on the remote host is earlier than 3.71 (Build 4200). As such, it is reportedly affected by a directory traversal vulnerability in the ActiveX file 'igcom.dll'. User- supplied input is not properly validated and can allow an attacker to overwrite arbitrary files.

Solution

Upgrade to version 3.71.4200.0 or later.

Plugin Details

Severity: High

ID: 59325

File Name: scada_integraxor_3_71_4200.nbin

Version: $Revision: 1.28 $

Type: local

Family: SCADA

Published: 2012/06/01

Modified: 2018/05/21

Dependencies: 53548

Risk Information

Risk Factor: High

CVSSv2

Base Score: 9.3

Temporal Score: 7.7

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:ecava:integraxor

Required KB Items: SCADA/Apps/Ecava/IntegraXor/Installed

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2012/03/22

Vulnerability Publication Date: 2012/03/23

Reference Information

CVE: CVE-2012-0246

BID: 52763

ICSA: 12-083-01