Lucene search
IcscertCVELIST:CVE-2023-3329HistoryAug 02, 2023 - 10:26 p.m.
CVE-2023-3329 CVE-2023-3329
2023-08-0222:26:07
icscert
www.cve.org
spidercontrol scada
webserver
path traversal
file overwrite
denial-of-service
hmi upload
0.001 Low
EPSS
Percentile
21.4%
SpiderControl SCADA Webserver versions 2.08 and prior are vulnerable to path traversal. An attacker with administrative privileges could overwrite files on the webserver using the HMI’s upload file feature. This could create size zero files anywhere on the webserver, potentially overwriting system files and creating a denial-of-service condition.
CNA Affected
[
{
"vendor": "iniNet",
"product": "SCADAWebServer",
"versions": [
{
"status": "affected",
"version": "0",
"lessThanOrEqual": "2.08",
"versionType": "custom"
}
]
}
]Related
ics
ics
SpiderControl SCADAWebServer
2023-06-22 12:00:00
cve
cve
CVE-2023-3329
2023-08-02 23:15:10
nvd
nvd
CVE-2023-3329
2023-08-02 23:15:10
prion
prion
Path traversal
2023-08-02 23:15:00