Evil-DB LogoEvil-DB
← All CVEs

CVE-2011-3495

high · 10

Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify, or delete arbitrary files via the (1) RF, (2) wF, (3) UF, or (4) NF command.

10
CVSS
10.3%
EPSS (exploit prob.)
95th
EPSS percentile
2011-09-16
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-22

Affected products

VendorProductAffected versions
measuresoftscadapro<= 4.0.0
measuresoftscadapro2.1
measuresoftscadapro2.2
measuresoftscadapro2.3
measuresoftscadapro2.4
measuresoftscadapro2.4.1
measuresoftscadapro2.4.2
measuresoftscadapro2.4.3
measuresoftscadapro2.4.4
measuresoftscadapro2.4.5
measuresoftscadapro2.4.6
measuresoftscadapro2.5
measuresoftscadapro2.5.1
measuresoftscadapro2.5.2
measuresoftscadapro2.5.3
measuresoftscadapro2.5.4
measuresoftscadapro2.5.5
measuresoftscadapro2.6.0
measuresoftscadapro2.7.0
measuresoftscadapro2.7.1
measuresoftscadapro2.7.2
measuresoftscadapro2.8.0
measuresoftscadapro2.9.0
measuresoftscadapro3.1.0
measuresoftscadapro3.2.8
measuresoftscadapro3.2.9
measuresoftscadapro3.3.0
measuresoftscadapro3.3.1
measuresoftscadapro3.3.2
measuresoftscadapro3.9.0
measuresoftscadapro3.9.1
measuresoftscadapro3.9.2
measuresoftscadapro3.9.3
measuresoftscadapro3.9.4
measuresoftscadapro3.9.5
measuresoftscadapro3.9.6
measuresoftscadapro3.9.7
measuresoftscadapro3.9.8
measuresoftscadapro3.9.9
measuresoftscadapro3.9.10

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-3495