Vulnerability record · CVE-2011-3339 · published 17 December 2011

CVE-2011-3339: 7t igss cross-site scripting vulnerability

77t · Igss

Cross-site scripting (XSS) vulnerability in the Admin Control Center in Sentinel HASP Run-time Environment 5.95 and earlier in SafeNet Sentinel HASP (formerly Aladdin HASP SRM) run-time installer before 6.x and SDK before 5.11, as used in 7 Technologies (7T) IGSS 7 and other products, when Firefox 2.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger write access to a configuration file.

4.3 CVSS 2.0 Medium EPSS 1.3% · top 29.7% CWE-79 · Cross-site scripting

4.3CVSS 2.0 base score

1.3%EPSS exploitation probability, 30 days

NoNot in CISA KEV

3Affected product versions listed by NVD

8References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

7Igss 7t

Sentinel Hasp Run Time Safenet Inc

Sentinel Hasp Sdk Safenet Inc

References

Link	Tags
http://www.safenet-inc.com/support-downloads/sentinel-drivers/CVE-2011-3339/	Vendor Advisory
http://www.securityfocus.com/bid/51028
http://www.us-cert.gov/control_systems/pdf/ICSA-11-314-01.pdf	Third Party AdvisoryUS Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/71789
http://www.safenet-inc.com/support-downloads/sentinel-drivers/CVE-2011-3339/	Vendor Advisory
http://www.securityfocus.com/bid/51028
http://www.us-cert.gov/control_systems/pdf/ICSA-11-314-01.pdf	Third Party AdvisoryUS Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/71789

Track CVE-2011-3339 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2011-29597t igss memory buffer overflow vulnerabilityStack-based buffer overflow in the Open Database Connectivity (ODBC) service (Odbcixv9se.exe) in 7-Technologies Interactive Graphical SCADA System (I…EPSS 6.9%29 Jul 2011 10.0CVE-2011-22147t igss vulnerabilityUnspecified vulnerability in the Open Database Connectivity (ODBC) component in 7T Interactive Graphical SCADA System (IGSS) before 9.0.0.11143 allow…EPSS 4.7%31 May 2011 10.0CVE-2011-15687t igss vulnerabilityFormat string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technol…EPSS 19%5 Apr 2011 10.0CVE-2011-1566IGSS dc.exe directory traversal allows remote code executionThe dc.exe component of 7-Technologies IGSS (version 9.00.00.11059 and earlier) is vulnerable to directory traversal via ..\ sequences embedded in op…EPSS 67%analysed5 Apr 2011 10.0CVE-2011-1567IGSS IGSSdataServer.exe stack buffer overflow via crafted opcodesIGSSdataServer.exe in 7-Technologies IGSS 9.00.00.11063 and earlier contains multiple stack-based buffer overflows reachable through crafted commands…EPSS 70%analysed5 Apr 2011 10.0CVE-2011-1565IGSS SCADA Data Server Directory Traversal via TCP Port 12401IGSSdataServer.exe in 7-Technologies IGSS 9.00.00.11063 and earlier contains a directory traversal flaw (CWE-22) that lets remote attackers read, cre…EPSS 64%analysed5 Apr 2011 9.3CVE-2011-40537t igss vulnerabilityUntrusted search path vulnerability in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) before 9.0.0.11291 allows local users to gain pr…EPSS 1.5%19 Jan 2012 7.5CVE-2011-45377t igss memory buffer overflow vulnerabilityMultiple buffer overflows in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) 9.0.0.11355 and earlier allow remote attackers to execute …EPSS 4.5%27 Dec 2011

Source: NIST National Vulnerability Database (record CVE-2011-3339), CISA KEV, FIRST EPSS (scores of 2026-10-05). This page is refreshed as NVD updates the record.