KLogic SCADA KASKAD Directory Read

The vulnerability of the KLogic SCADA system “KASKAD”’s virtual controller is related to incorrect external manipulation of the file name or file path. Exploiting this vulnerability allows a malicious actor to read arbitrary directories within the operating system remotely...

KLogic SCADA Virtual Controller Brute Force

The vulnerability of the KLogic SCADA system “KASKAD” lies in the insufficient limitation on authentication attempts. Exploiting this vulnerability allows a malicious actor to carry out an attack using brute-force methods...

KWebVision SCADA Unauthorized Access

The vulnerability of the KWebVision web visualization module in the “KASKAD” SCADA system relates to the use of a password hash instead of a password for authentication. Exploiting this vulnerability could allow an intruder to gain unauthorized access to the system...

KWebVision SCADA Unauthorized Access

The vulnerability of the KWebVision web visualization module in the “KASKAD” SCADA system is related to incorrect session duration settings. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the system...

KLogic SCADA KASKAD Privilege Escalation File Deletion

The vulnerability of the KLogic SCADA system “KASKAD” virtual controller is related to incorrect external control of the file name or file path. Exploiting this vulnerability can allow a malicious actor to increase their privileges and delete arbitrary files...

KLogic SCADA KASKAD Unauthorized Read Write

The vulnerability of the KLogic SCADA system “KASKAD”’s virtual controller is related to the absence of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to perform unauthorized data reading and writing operations remotely...

KWebVision SCADA Unauthorized Access

The vulnerability of the KWebVision web visualization module in the “KASKAD” SCADA system is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow an intruder to gain unauthorized access to the system...

KWebVision SCADA Unauthorized Access

The vulnerability of the KWebVision web visualization module in the “KASKAD” SCADA system is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the system...

KWebVision SCADA Unauthorized Access

The vulnerability of the KWebVision web visualization module in the “KASKAD” SCADA system is related to insufficient protection of registration data. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

KLogic SCADA KASCAD Data Compromise

The vulnerability of the KLogic SCADA system “KASKAD”’s virtual controller is related to the use of a password hash instead of the actual password for authentication. Exploiting this vulnerability allows an intruder to compromise the confidentiality, integrity, and accessibility of the protected...

KLogic SCADA KASCAD Data Compromise

The vulnerability of the KLogic SCADA system “KASKAD”’s virtual controller is related to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

KLogic SCADA KASKAD Code Execution

The vulnerability of the KLogic SCADA system “KASKA” lies in an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

PT-2025-55393

Уязвимость виртуального контроллера KLogic SCADA-системы «КАСКАД» связана с некорректным внешним управлением именем или путем файла. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии и удалить произвольные файлы...

PT-2025-55386

Уязвимость модуля веб-визуализации KWebVision SCADA-системы «КАСКАД» связана с неправильным присвоением разрешений для критичного ресурса. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к системе...

PT-2025-63020

Уязвимость виртуального контроллера KLogic SCADA-системы «КАСКАД» связана с отсутствием аутентификации для критичной функции. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, изменять телеметрическую информацию и осуществлять телеуправление ведомыми устройствами по...

PT-2025-55385

Уязвимость модуля веб-визуализации KWebVision SCADA-системы «КАСКАД» связана с неверным сроком действия сеанса. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к системе...