module

SCADA 3S CoDeSys CmpWebServer Stack Buffer Overflow

Disclosed
2011-12-02
Created
2018-05-30

Description

This module exploits a remote stack buffer overflow vulnerability in
3S-Smart Software Solutions product CoDeSys Scada Web Server Version
1.1.9.9. This vulnerability affects versions 3.4 SP4 Patch 2 and
earlier.

Authors

Luigi Auriemma
Celil UNUVER
TecR0c roccogiovannicalvi@gmail.com
sinn3r sinn3r@metasploit.com
Michael Coppola

Platform

Windows

Module Options

To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:


msf > use exploit/windows/scada/codesys_web_server
msf exploit(codesys_web_server) > show targets
...targets...
msf exploit(codesys_web_server) > set TARGET < target-id >
msf exploit(codesys_web_server) > show options
...show and set options...
msf exploit(codesys_web_server) > exploit

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.