Design/Logic Flaw

2012-05-2519:55:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

Untrusted search path vulnerability in Measuresoft ScadaPro Client before 4.0.0 and ScadaPro Server before 4.0.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

CPENameOperatorVersion
scadapro_clientle3.3.1
scadapro_serverle3.3.1

CPE	Name	Operator	Version
	scadapro_client	le	3.3.1
	scadapro_server	le	3.3.1

References

www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Client/DOCUMENTATION/ReleaseNotes.doc

www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Server/DOCUMENTATION/ReleaseNotes.doc

www.us-cert.gov/control_systems/pdf/ICSA-12-145-01.pdf