Iconics GENESIS32 Integer overflow version 9.21.201.01

The GenBroker service on port 38080 is affected by three integer overflow vulnerabilities while handling opcode 0x4b0, which is caused by abusing the the memory allocations needed for the number of elements passed by the client. This results unexpected behaviors such as direct registry calls, memory location calls, or arbitrary remote code execution. Please note that in order to ensure reliability, this exploit will try to open calc (hidden), inject itself into the process, and then open up a shell session. Also, DEP bypass is supported.

Search Other Modules

Exploit Rank

• Good

Exploit Authors

• Luigi Auriemma < >
• Lincoln < >
• corelanc0d3r < peter.ve [at] corelan.be >

Vulnerability References

• http://aluigi.org/adv/genesis_4-adv.txt
• http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-02.pdf

Exploit Targets

• 0 - Windows XP (default)

Exploit Development

• Source Code
• History

Similar Exploit Modules

• exploit/windows/scada/citect_scada_odbc
• exploit/windows/scada/codesys_web_server
• exploit/windows/scada/daq_factory_bof
• exploit/windows/scada/factorylink_csservice
• exploit/windows/scada/factorylink_vrn_09
• exploit/windows/scada/iconics_webhmi_setactivexguid
• exploit/windows/scada/igss9_igssdataserver_listall
• exploit/windows/scada/igss9_igssdataserver_rename
• exploit/windows/scada/igss9_misc
• exploit/windows/scada/moxa_mdmtool

Exploit Usage Information

Exploit Module Options