{"uuid": "b657487e-9f5b-4e9c-9dda-3e489977ed09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-3497", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/scadapro_cmdexe.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Luigi Auriemma\", \"mr_me \", \"TecR0c \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module allows remote attackers to execute arbitrary commands on the\\n          affected system by abusing via Directory Traversal attack when using the\\n          'xf' command (execute function). An attacker can execute system() from\\n          msvcrt.dll to upload a backdoor and gain remote code execution. This\\n          vulnerability affects version 4.0.0 and earlier.\", \"disclosure_date\": \"2011-09-16\", \"fullname\": \"exploit/windows/scada/scadapro_cmdexe\", \"is_install_path\": true, \"mod_time\": \"2026-03-11 21:31:08 +0000\", \"name\": \"Measuresoft ScadaPro Remote Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/scada/scadapro_cmdexe.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/scada/scadapro_cmdexe\", \"references\": [\"CVE-2011-3497\", \"OSVDB-75490\", \"BID-49613\", \"URL-http://aluigi.altervista.org/adv/scadapro_1-adv.txt\", \"URL-http://us-cert.gov/control_systems/pdf/ICS-ALERT-11-256-04.pdf\", \"URL-http://www.measuresoft.net/news/post/Inaccurate-Reports-of-Measuresoft-ScadaPro-400-Vulnerability.aspx\"], \"rport\": 11234, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:30.453725Z"}