EUVD-2017-7905

Malware in sbrugna...

Geovap Reliance 4 SCADA/HMI Cross-Site Scripting Vulnerability

Geovap Reliance 4 SCADA/HMI is an industrial process and building automation monitoring system from GEOVAP in the Czech Republic. A security vulnerability exists in Geovap Reliance 4 SCADA/HMI 4.7.3 Update 3 and earlier versions. An attacker can exploit the vulnerability to inject arbitrary code...

Geovap Reliance SCADA Detection (HTTP)

This scripts sends an HTTP GET request to figure out whether a Geovap Reliance SCADA system is installed on the target host, and, if so, which version. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Cross site scripting

A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerability could allow an unauthenticated attacker to inject arbitrary code...

CVE-2017-16721

A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerability could allow an unauthenticated attacker to inject arbitrary code...

CVE-2017-16721

A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerability could allow an unauthenticated attacker to inject arbitrary code...

CVE-2017-16721

A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerability could allow an unauthenticated attacker to inject arbitrary code...

CVE-2017-16721

Geovap Reliance SCADA is affected by CVE-2017-16721, an XSS vulnerability in versions 4.7.3 Update 2 and prior. An unauthenticated attacker could inject arbitrary code via a crafted URL, potentially enabling read/write access in the affected system. ICS-CERT reports a fixed version 4.7.3 Update 3...

Geovap Reliance SCADA Cross-Site Scripting Vulnerability

Reliance is a professional SCADA/HMI system designed for the visualization and control of industrial processes as well as building and home automation. A cross-site scripting vulnerability exists in Geovap Reliance SCADA that allows an unauthenticated attacker to inject arbitrary code...

GEOVAP Reliance 4 Control Server Privilege Escalation Vulnerability

GEOVAP Reliance 4 Control Server suffers from an unquoted search path issue impacting the service 'RelianceOpcDaWrapper' for Windows deployed as part of Reliance 4 SCADA/HMI system installer including Reliance OPC Server. This could potentially allow an authorized but non-privileged local user to...

GEOVAP Reliance 4 Control Server Unquoted Service Path Elevation Of Privilege

Summary Reliance is a professional SCADA/HMI system designed for the visualization and control of industrial processes and for building automation. Description The application suffers from an unquoted search path issue impacting the service 'RelianceOpcDaWrapper' for Windows deployed as part of...