Insomnia Security has reported a vulnerability in 7-Technologies Interactive Graphical SCADA System, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error in the ODBC server (Odbcixv9se.exe) when processing certain packets. This can be exploited to cause a stack-based buffer overflow via a specially crafted packet sent to TCP port 20222.

Successful exploitation may allow execution of arbitrary code.

Solution
Fixed in the latest version. Contact the vendor for more information.

Provided and/or discovered by
James Burton, Insomnia Security

Changelog
Further details available to Secunia VIM customers

Original Advisory
Insomnia Security:
http://www.insomniasec.com/advisories/ISVA-110427.1.htm

Deep Links
Links available to Secunia VIM customers