KLogic SCADA KASCAD Data Compromise

The vulnerability of the KLogic SCADA system “KASKAD”’s virtual controller is related to the use of a password hash instead of the actual password for authentication. Exploiting this vulnerability allows an intruder to compromise the confidentiality, integrity, and accessibility of the protected...

KLogic SCADA KASCAD Data Compromise

The vulnerability of the KLogic SCADA system “KASKAD”’s virtual controller is related to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

KLogic SCADA KASCAD Unauthorized File Write

The vulnerability of the KLogic SCADA system “KASCAD” lies in the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to perform unauthorized writing operations on uploaded files or configuration files...

KLogic SCADA Path Traversal

The vulnerability of the KLogic SCADA system “KASCAD” lies in an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a malicious actor to perform unauthorized reading of files in the virtual controller and the operating system, as well as writing arbitrary...

KLogic SCADA Virtual Controller IEC 60870-5-104

The vulnerability of the KLogic SCADA system “KASCAD” lies in the lack of authentication for a critical function. Exploiting this vulnerability allows an intruder to modify telemetry information and perform telecontrol over devices according to the IEC 60870-5-104 protocol...