Lucene search

CertccCVELIST:CVE-2012-1824

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-1824

2022-10-0316:15:25

certcc

www.cve.org

untrusted search path

measuresoft scadapro client

measuresoft scadapro server

local privilege escalation

trojan horse dll

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

Untrusted search path vulnerability in Measuresoft ScadaPro Client before 4.0.0 and ScadaPro Server before 4.0.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

References

www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Client/DOCUMENTATION/ReleaseNotes.doc

www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Server/DOCUMENTATION/ReleaseNotes.doc

www.us-cert.gov/control_systems/pdf/ICSA-12-145-01.pdf