CVE-2011-1568
Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00...
Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated using the RMS Reports Delete command, related to the logging of messages to GSST.LOG. NOTE: some of these details are obtained from third party information.
Exploit likelihood
What each source reports
NVD Score used
Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated using the RMS Reports Delete command, related to the logging of messages to GSST.LOG. NOTE: some of these details are obtained from third party information.
- Record
CVE-2011-1568- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-134
- Updated
- 2026-11-02
CVE List No score
Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated using the RMS Reports Delete command, related to the logging of messages to GSST.LOG. NOTE: some of these details are obtained from third party information.
- Record
CVE-2011-1568- Updated
- 2026-11-02
EUVDEUVD-2011-1569 No score
Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated using the RMS Reports Delete command, related to the logging of messages to GSST.LOG. NOTE: some of these details are obtained from third party information.
- Record
EUVD-2011-1569- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gf7p-qcfm-2w7c No score
Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00...
Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated using the RMS Reports Delete command, related to the logging of messages to GSST.LOG. NOTE: some of these details are obtained from third party information.
- Record
GHSA-gf7p-qcfm-2w7c- Weakness
- CWE-134
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | 7-Technologies IGSS 9.00.00.11059 - Multiple Vulnerabilities | 2011-03-22 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1568 is a high vulnerability (CVSS 10.0) in 7t Igss, published April 5, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 19.4%, the 97th percentile. No source names a fixed version.
References
securityfocus.com/bid/46936
us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-03.pdf
secunia.com/advisories/43849
vupen.com/english/advisories/2011/0741
exploit-db.com/exploits/17024
aluigi.org/adv/igss_6-adv.txt
securityreason.com/securityalert/8182
nvd.nist.gov/vuln/detail/CVE-2011-1568
github.com/advisories/GHSA-gf7p-qcfm-2w7c