Skip to content

CVE-2011-3497

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute...

10.0 HighPublic exploit

CVE-2011-3497 is a high vulnerability (CVSS 10.0) in Measuresoft Scadapro, published September 16, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 57.1%, the 99th percentile. No source names a fixed version.

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method.

Exploit likelihood

57.1%Up 19.9 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method.

Record: CVE-2011-3497
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method.

Record: CVE-2011-3497
Updated: 2026-11-02

EUVDEUVD-2011-3460 No score

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method.

Record: EUVD-2011-3460
Updated: 2026-11-03

GitHub AdvisoriesGHSA-2pr9-2h78-r68r No score

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute...

service.exe in Measuresoft ScadaPro 4.0.0 and earlier allows remote attackers to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method.

Record: GHSA-2pr9-2h78-r68r
Weakness: CWE-200
Updated: 2026-11-02

Affected products

measuresoft scadapro

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Measuresoft ScadaPro 4.0.0 - Multiple Vulnerabilities	2011-09-14
Metasploit	Measuresoft ScadaPro Remote Command Execution	2011-09-16

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

References