CVE-2011-4050

published 2011-12-27

CVE-2011-4050: Buffer overflow in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) 9.0.0.11200 allows remote attackers to cause a denial of service via a crafted…

Priority P3 41 medium 5 CVSS 2.0

AV N AC L Au N C N I N A P

EXPLOIT

Buffer overflow in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) 9.0.0.11200 allows remote attackers to cause a denial of service via a crafted packet to TCP port 12401.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
7t	igss	—	—

Detection & IOCs extracted from sources · hover to see the quote

port 12401/TCP↗

process IGSSdataServer.exe↗

• → Detect exploitation attempts by monitoring for crafted TCP packets sent to port 12401 targeting IGSSdataServer.exe; anomalous or malformed packet content on this port is indicative of CVE-2011-4050 exploitation. ↗
• → Alert on unexpected crashes or termination of the IGSSdataServer.exe process, especially when preceded by inbound TCP connections on port 12401. ↗

• · The Metasploit auxiliary module notes the DoS was confirmed for versions <= 9.0.0.10306, and is expected (but untested) to also affect version <= 9.0.0.11200; detections should cover both version ranges. ↗
• · No known public exploits specifically targeted this vulnerability at time of advisory publication; however, a Metasploit auxiliary DoS module exists. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-119