Schneider Electric Interactive Graphical SCADA System dc.exe Unspecified Buffer Overflow

Critical Nessus Plugin ID 64296


The remote Windows host contains a SCADA application that is affected by a buffer overflow vulnerability.


The installed version of IGSS is 9.x earlier than / 10.x earlier than It is, therefore, reportedly affected by an unspecified buffer overflow vulnerability.

By sending specially crafted packets to the dc.exe service on TCP port 12397, an unauthenticated, remote attacker could trigger a buffer overflow resulting in arbitrary code execution or a denial of service condition (service crash).


Upgrade to IGSS version / or later.

See Also

Plugin Details

Severity: Critical

ID: 64296

File Name: scada_igss_9_0_0_12331.nbin

Version: $Revision: 1.23 $

Type: local

Family: SCADA

Published: 2013/01/30

Modified: 2018/01/29

Dependencies: 52961

Risk Information

Risk Factor: Critical


Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:schneider-electric:interactive_graphical_scada_system

Required KB Items: SCADA/Apps/7T/IGSS/Installed

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2013/01/10

Vulnerability Publication Date: 2013/01/10

Exploitable With

Core Impact

Reference Information

CVE: CVE-2013-0657

BID: 57449

OSVDB: 89324

ICSA: 13-018-01