Measuresoft records

13 published records for vendor measuresoft.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 1 · 7.7%
Pre-auth RCE: 3
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

13 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
57Plan	CVE-2011-3497Weaponized	service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibmeasuresoft · scadapro · CWE-200 pre-auth RCE Info leak	Critical10.0	—	57.1%	Sep 16, 2011
51Plan	CVE-2011-3490Proof of concept	Multiple stack-based buffer overflows in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to cause a denial of smeasuresoft · scadapro · CWE-119 pre-auth RCE Memory safety	Critical10.0	—	36.4%	Sep 16, 2011
44Plan	CVE-2011-3496Proof of concept	service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the measuresoft · scadapro · CWE-20 pre-auth RCE	Critical10.0	—	14.4%	Sep 16, 2011
43Plan	CVE-2011-3495Proof of concept	Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modifymeasuresoft · scadapro · CWE-22 Pre-auth Path traversal	Critical10.0	—	10.3%	Sep 16, 2011
31Monitor	CVE-2022-2896No exploit	Measuresoft ScadaPro Server Use After Freemeasuresoft · scadapro server · CWE-121 Memory safety	High7.8	—	0.3%	Aug 31, 2022
31Monitor	CVE-2022-2892No exploit	Measuresoft ScadaPro Server Out-of-bounds Writemeasuresoft · scadapro server · CWE-787 Memory safety	High7.8	—	0.3%	Aug 31, 2022
31Monitor	CVE-2022-2895No exploit	Measuresoft ScadaPro Server Stack-based Buffer Overflowmeasuresoft · scadapro server · CWE-121 Memory safety	High7.8	—	0.3%	Aug 31, 2022
31Monitor	CVE-2022-2894No exploit	Measuresoft ScadaPro Server Untrusted Pointer Dereferencemeasuresoft · scadapro server · CWE-822	High7.8	—	0.3%	Aug 31, 2022
31Monitor	CVE-2022-2897No exploit	Measuresoft ScadaPro Server and Client Link Followingmeasuresoft · scadapro client · CWE-59 Local privilege escalation	High7.8	—	0.3%	Aug 31, 2022
31Monitor	CVE-2022-3263No exploit	Measuresoft ScadaPro Server Improper Access Controlmeasuresoft · scadapro server · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.8	—	0.3%	Sep 23, 2022
28Monitor	CVE-2012-1824No exploit	Untrusted search path vulnerability in Measuresoft ScadaPro Client before 4.0.0 and ScadaPro Server before 4.0.0 allows local users to gain measuresoft · scadapro client Local privilege escalation	High7.2	—	0.5%	May 25, 2012
27Monitor	CVE-2024-3746No exploit	Measuresoft ScadaPro Improper Access Controlmeasuresoft · scadapro server · CWE-284 Local privilege escalation Broken access control (IDOR)	Medium6.8	—	0.2%	Apr 30, 2024
22Monitor	CVE-2022-2898No exploit	Measuresoft ScadaPro Server and Client Link Followingmeasuresoft · scadapro client · CWE-59 Denial of service	Medium5.5	—	0.2%	Aug 31, 2022

CVE-2011-3497
57Plan
service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possib
CriticalCVSS 10.0WeaponizedEPSS 57%
- pre-auth RCE
- Info leak
measuresoft · scadaproSep 16, 2011
CVE-2011-3490
51Plan
Multiple stack-based buffer overflows in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to cause a denial of s
CriticalCVSS 10.0Proof of conceptEPSS 36%
- pre-auth RCE
- Memory safety
measuresoft · scadaproSep 16, 2011
CVE-2011-3496
44Plan
service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the
CriticalCVSS 10.0Proof of conceptEPSS 14%
- pre-auth RCE
measuresoft · scadaproSep 16, 2011
CVE-2011-3495
43Plan
Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify
CriticalCVSS 10.0Proof of conceptEPSS 10%
- Pre-auth
- Path traversal
measuresoft · scadaproSep 16, 2011
CVE-2022-2896
31Monitor
Measuresoft ScadaPro Server Use After Free
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
measuresoft · scadapro serverAug 31, 2022
CVE-2022-2892
31Monitor
Measuresoft ScadaPro Server Out-of-bounds Write
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
measuresoft · scadapro serverAug 31, 2022
CVE-2022-2895
31Monitor
Measuresoft ScadaPro Server Stack-based Buffer Overflow
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
measuresoft · scadapro serverAug 31, 2022
CVE-2022-2894
31Monitor
Measuresoft ScadaPro Server Untrusted Pointer Dereference
HighCVSS 7.8No exploitEPSS 0%
measuresoft · scadapro serverAug 31, 2022
CVE-2022-2897
31Monitor
Measuresoft ScadaPro Server and Client Link Following
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
measuresoft · scadapro clientAug 31, 2022
CVE-2022-3263
31Monitor
Measuresoft ScadaPro Server Improper Access Control
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
measuresoft · scadapro serverSep 23, 2022
CVE-2012-1824
28Monitor
Untrusted search path vulnerability in Measuresoft ScadaPro Client before 4.0.0 and ScadaPro Server before 4.0.0 allows local users to gain
HighCVSS 7.2No exploitEPSS 0%
- Local privilege escalation
measuresoft · scadapro clientMay 25, 2012
CVE-2024-3746
27Monitor
Measuresoft ScadaPro Improper Access Control
MediumCVSS 6.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
measuresoft · scadapro serverApr 30, 2024
CVE-2022-2898
22Monitor
Measuresoft ScadaPro Server and Client Link Following
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
measuresoft · scadapro clientAug 31, 2022