CVE-2022-25359

🗓️ 26 Feb 2022 05:15:08Reported by [email protected]Type

Unauthenticated remote attackers can overwrite, delete, or create files on ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 device

Reporter	Title	Published	Views	Family All 16
0day.today	ScadaFlex II SCADA Controllers SC-1/SC-2 1.03.07 Remote File Modification Exploit	22 Feb 202200:00	–	zdt
ATTACKERKB	CVE-2022-25359	26 Feb 202205:15	–	attackerkb
BDU FSTEC	The vulnerability of the microprogrammed software of the programmable logic controller ScadaFlex II SCADA Controller SC-1/SC-2 lies in the absence of authentication procedures, allowing unauthorized access to the device without being authenticated.	11 May 202300:00	–	bdu_fstec
CNNVD	Industrial Control Links Icl ScadaFlex II Scada Controllers 访问控制错误漏洞	22 Feb 202200:00	–	cnnvd
CVE	CVE-2022-25359	26 Feb 202204:19	–	cve
Cvelist	CVE-2022-25359	26 Feb 202204:19	–	cvelist
Exploit DB	ICL ScadaFlex II SCADA Controllers SC-1/SC-2 1.03.07 - Remote File CRUD	23 Feb 202200:00	–	exploitdb
ICS	Industrial Control Links ScadaFlex II SCADA Controllers	10 Apr 202316:19	–	ics
OSV	CVE-2022-25359	26 Feb 202205:15	–	osv
Packet Storm	ICL ScadaFlex II SCADA Controllers SC-1/SC-2 1.03.07 Remote File Modification	22 Feb 202200:00	–	packetstorm

NVD

Node

AND

Source	Link
files	www.files.iclinks.com/datasheets/Scadaflex%20II/Scadaflex%20SC-1%20&%20SC-2_A1_compressed.pdf
packetstormsecurity	www.packetstormsecurity.com/files/166103/ICL-ScadaFlex-II-SCADA-Controllers-SC-1-SC-2-1.03.07-Remote-File-Modification.html

17 Jun 2026 04:33Current

CVSS 26.4

CVSS 3.19.1

EPSS0.37295