Intrusion PreventionSunway.ForceControl.NetServer.Information.Disclosure
Description
This indicates an attack attempt to exploit an Information Disclosure vulnerability in Sunway ForceControl.
The vulnerability is due to an error when the vulnerable application handles malformed packets. It may allow a remote attacker to read arbitrary file by sending crafted packets from the client.
Affected Products
Sunway ForceControl 6.1 sp3 and earlier versions
Impact
Information Disclosure: Remote attackers can gain sensitive information from
vulnerable systems.
Recommended Actions
Currently we are not aware of any vendor supplied patch for this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 29959 |
| Created | Nov 17, 2011 |
| Updated | Feb 24, 2022 |
| Risk |
|
| CVE ID | CVE-2011-2960 |
| Exploit Prediction Score | 8.33% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | SCADA |