The vulnerability of the KLogic SCADA system “KASKAD”’s virtual controller allows a intruder to execute arbitrary code.

The vulnerability of the KLogic SCADA system “KASKA” lies in an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...