CVE-2011-3496

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) BF, (2) OF, or (3) EF command.

Date published : 2011-09-16

http://www.exploit-db.com/exploits/17848

http://aluigi.altervista.org/adv/scadapro_1-adv.txt