Measuresoft ScadaPro Path Subversion Arbitrary DLL Injection Code Execution
High Nessus Plugin ID 59559
SynopsisThe remote Windows host has an application installed that has an arbitrary code execution vulnerability.
DescriptionThe remote Windows host has a version of Measuresoft ScadaPro prior to version 22.214.171.124. As such, it reportedly has a DLL loading vulnerability that can be exploited by placing a Trojan DLL into a folder on the victim host where it could be loaded before a valid DLL.
SolutionUpgrade to ScadaPro 126.96.36.199 or later.