What’s Vulnerable › Vulnerabilities

CVE-2011-3495

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 10.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2011-09-16 · updated 2026-06-16
• Weakness: CWE-22

Description

Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify, or delete arbitrary files via the (1) RF, (2) wF, (3) UF, or (4) NF command.

Affected products

• Measuresoft Scadapro: through 4.0.0; 2.1, 2.2, 2.3, 2.4, 2.4.1, 2.4.2 (+38)

References

• http://aluigi.altervista.org/adv/scadapro_1-adv.txt
• http://securityreason.com/securityalert/8382
• http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-04.pdf
• http://aluigi.altervista.org/adv/scadapro_1-adv.txt
• http://securityreason.com/securityalert/8382
• http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-04.pdf

Get alerted when CVE-2011-3495 or the next vulnerability affects your stack