Lucene search
PRIOn knowledge basePRION:CVE-2023-2187HistoryJun 07, 2023 - 7:15 a.m.
Design/Logic Flaw
2023-06-0707:15:00
PRIOn knowledge base
www.prio-n.com
4
scada data gateway
vulnerability
unauthenticated attacker
broadcast events
log out
false events
On Triangle MicroWorks’ SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send broadcast events to any user via the WebMonitor.An unauthenticated user can use this vulnerability to forcefully log out of any currently logged-in user by sending a “password change event”. Furthermore, an attacker could use this vulnerability to spam the logged-in user with false events.
| CPE | Name | Operator | Version |
|---|---|---|---|
| scada_data_gateway | le | 5.01.03 |
Related
cvelist
cvelist
CVE-2023-2187
2023-06-07 06:42:31
nvd
nvd
CVE-2023-2187
2023-06-07 07:15:08
cve
cve
CVE-2023-2187
2023-06-07 07:15:08
trellix
trellix
Industrial and Manufacturing CVEs: Addressing the SCADA in the Room
2023-05-22 00:00:00
Industrial and Manufacturing CVEs: Addressing the SCADA in the Room
2023-05-22 00:00:00