Rapid Software LLC Rapid SCADA

🗓️ 11 Jan 2024 07:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 83 Views

Rapid SCADA Vulnerabilities - Path Traversal, Privilege Escalation

Reporter	Title	Published	Views	Family All 84
BDU FSTEC	The vulnerability of the Rapid SCADA system, related to the use of open redirection, allows a hacker to redirect a user to any arbitrary URL address.	5 Feb 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Rapid SCADA system, related to errors in processing the relative path to the catalog, allows a intruder to read arbitrary files.	5 Feb 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Rapid SCADA system, related to deficiencies in the error reporting mechanism, allows a intruder to gain unauthorized access to protected information.	5 Feb 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Rapid SCADA system, related to the storage of passwords in an unencrypted form, allows a intruder to gain unauthorized access to protected information.	5 Feb 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Rapid SCADA system, related to incorrect restrictions on the name of the path to the restricted access catalog, allows a intruder to execute arbitrary code.	5 Feb 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Rapid SCADA system, which stems from the use of rigidly encoded account data, allows a intruder to gain full control over the system.	5 Feb 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Rapid SCADA system, related to the improper assignment of permissions for critical resources, allows a intruder to increase their privileges.	5 Feb 202400:00	–	bdu_fstec
Circl	CVE-2024-21764	2 Feb 202401:31	–	circl
Circl	CVE-2024-21794	2 Feb 202401:31	–	circl
Circl	CVE-2024-21852	2 Feb 202400:26	–	circl

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-011-03.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-011-03
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

11 Jan 2024 07:00Current

7.8High risk

Vulners AI Score7.8

CVSS 3.19.8

EPSS0.01233

SSVC

rapid scada vulnerabilities path traversal privilege escalation remote code execution open redirect hard-coded credentials