CVE-2022-25359

🗓️ 26 Feb 2022 04:19:01Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 123 Views🌐 WEB

CVE-2022-25359: ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files

Reporter	Title	Published	Views	Family All 16
0day.today	ScadaFlex II SCADA Controllers SC-1/SC-2 1.03.07 Remote File Modification Exploit	22 Feb 202200:00	–	zdt
ATTACKERKB	CVE-2022-25359	26 Feb 202205:15	–	attackerkb
BDU FSTEC	The vulnerability of the microprogrammed software of the programmable logic controller ScadaFlex II SCADA Controller SC-1/SC-2 lies in the absence of authentication procedures, allowing unauthorized access to the device without being authenticated.	11 May 202300:00	–	bdu_fstec
CNNVD	Industrial Control Links Icl ScadaFlex II Scada Controllers 访问控制错误漏洞	22 Feb 202200:00	–	cnnvd
Cvelist	CVE-2022-25359	26 Feb 202204:19	–	cvelist
Exploit DB	ICL ScadaFlex II SCADA Controllers SC-1/SC-2 1.03.07 - Remote File CRUD	23 Feb 202200:00	–	exploitdb
ICS	Industrial Control Links ScadaFlex II SCADA Controllers	10 Apr 202316:19	–	ics
NVD	CVE-2022-25359	26 Feb 202205:15	–	nvd
OSV	CVE-2022-25359	26 Feb 202205:15	–	osv
Packet Storm	ICL ScadaFlex II SCADA Controllers SC-1/SC-2 1.03.07 Remote File Modification	22 Feb 202200:00	–	packetstorm

NVD

Node

iclinks scadaflex_ii_firmwareMatch1.01.01

iclinks scadaflex_ii_firmwareMatch1.01.14

iclinks scadaflex_ii_firmwareMatch1.02.01

iclinks scadaflex_ii_firmwareMatch1.02.15

iclinks scadaflex_ii_firmwareMatch1.02.20

iclinks scadaflex_ii_firmwareMatch1.03.07

iclinks weblibMatch1.13

iclinks weblibMatch1.14

iclinks weblibMatch1.16

iclinks weblibMatch1.22

iclinks weblibMatch1.24

AND

iclinks scadaflex_iiMatch-

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/166103/ICL-ScadaFlex-II-SCADA-Controllers-SC-1-SC-2-1.03.07-Remote-File-Modification.html
files	www.files.iclinks.com/datasheets/Scadaflex%20II/Scadaflex%20SC-1%20&%20SC-2_A1_compressed.pdf

Parameter	Position	Path	Description	CWE
N{filepos}	request body	/d.php?N{filepos},73,{filename}~{timestamp}	Unauthenticated file write over HTTP possible via POST to /d.php?N..., enabling create/overwrite of arbitrary files.	CWE-306
upload	request body	/d.php?N{filepos},73,{filename}~{timestamp}	Unauthenticated file write over HTTP possible via POST to /d.php?N..., enabling create/overwrite of arbitrary files.	CWE-306
filepos	path	/rW12IcL_Dat_N{filepos},0=1~{timestamp}	Unauthenticated file delete via GET to /rW12IcL_Dat_N..., enabling deletion of arbitrary files.	CWE-306

17 Jun 2026 04:33Current

9.3High risk

Vulners AI Score9.3

CVSS 26.4

CVSS 3.19.1

EPSS0.37295

CWE-306