Vulnerability record · CVE-2011-1568 · published 5 April 2011
CVE-2011-1568: 7t igss vulnerability
77t · Igss
Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated using the RMS Reports Delete command, related to the logging of messages to GSST.LOG. NOTE: some of these details are obtained from third party information.
Description
Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated using the RMS Reports Delete command, related to the logging of messages to GSST.LOG. NOTE: some of these details are obtained from third party information.
AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://aluigi.org/adv/igss_6-adv.txt | Exploit |
| http://secunia.com/advisories/43849 | Vendor Advisory |
| http://securityreason.com/securityalert/8182 | |
| http://www.exploit-db.com/exploits/17024 | Exploit |
| http://www.securityfocus.com/bid/46936 | Exploit |
| http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf | US Government Resource |
| http://www.vupen.com/english/advisories/2011/0741 | Vendor Advisory |
| http://aluigi.org/adv/igss_6-adv.txt | Exploit |
| http://secunia.com/advisories/43849 | Vendor Advisory |
| http://securityreason.com/securityalert/8182 | |
| http://www.exploit-db.com/exploits/17024 | Exploit |
| http://www.securityfocus.com/bid/46936 | Exploit |
| http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf | US Government Resource |
| http://www.vupen.com/english/advisories/2011/0741 | Vendor Advisory |
Track CVE-2011-1568 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2011-1568), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.