Rapid Software Rapid SCADA Security Vulnerability

Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. A security vulnerability exists in Rapid Software Rapid SCADA 5.8.4 and earlier versions that stems from storing plaintext credentials in a different location, which allows an attacker with local acce...

Rapid Software Rapid SCADA Security Vulnerability

Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. A security vulnerability exists in Rapid Software Rapid SCADA version 5.8.4 and prior versions, which stems from a vulnerability that allows an attacker to generate an error message containing sensiti...

Rapid Software Rapid SCADA Input Validation Error Vulnerability

Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. An input validation error vulnerability exists in Rapid Software Rapid SCADA version 5.8.4 and prior versions, which originates from a vulnerability that allows an attacker to redirect a user to a...

Rapid Software Rapid SCADA Trust Management Issue Vulnerability

Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. Rapid Software Rapid SCADA 5.8.4 and prior versions have a trust management issue vulnerability that stems from the use of hard-coded credentials, which allows an attacker to connect to a specific por...

Rapid Software Rapid SCADA Path Traversal Vulnerability

Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. A security vulnerability exists in Rapid Software Rapid SCADA version 5.8.4 and earlier, which stems from the presence of a path traversal vulnerability. An attacker can exploit this vulnerability to...

Rapid Software LLC Rapid SCADA

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely, low attack complexity Vendor: Rapid Software LLC Equipment: Rapid SCADA Vulnerabilities: Path Traversal, Relative Path Traversal, Local Privilege Escalation through Incorrect Permission Assignment for Critical Resource,...

PT-2024-1450 · Unknown · Rapid Scada

Name of the Vulnerable Software and Affected Versions: Rapid SCADA versions prior to 5.8.4 Description: The issue is related to incorrect permission assignment for a critical resource in the SCADA system. This may allow an attacker to escalate their privileges. An authorized user can write direct...

PT-2024-1448 · Unknown · Rapid Scada

Name of the Vulnerable Software and Affected Versions: Rapid SCADA versions prior to Version 5.8.4 Description: The issue is related to a Zip Slip vulnerability in the unpacking routine, allowing an attacker to supply a malicious configuration file and achieve remote code execution. This can be...

PT-2024-1446 · Unknown · Rapid Scada

Name of the Vulnerable Software and Affected Versions: Rapid SCADA versions prior to 5.8.4 Description: The issue is related to shortcomings in the error reporting mechanism of the SCADA system. It allows a remote attacker to gain unauthorized access to protected information by sending a speciall...

PT-2024-1444 · Unknown · Rapid Scada

Name of the Vulnerable Software and Affected Versions: Rapid SCADA versions prior to Version 5.8.4 Description: The issue is related to the use of open redirection due to incorrect data cleaning on the user login page. This allows an attacker to redirect users to malicious pages through the login...

PT-2024-1447 · Unknown · Rapid Scada

Name of the Vulnerable Software and Affected Versions: Rapid SCADA versions prior to 5.8.4 Description: The issue is related to the storage of passwords in plaintext. This may allow an attacker with local access to obtain unauthorized access to protected information. Recommendations: For versions...

PT-2024-1445 · Unknown · Rapid Scada

Name of the Vulnerable Software and Affected Versions: Rapid SCADA versions prior to 5.8.4 Description: The issue is related to errors in handling relative path to directory, allowing an attacker to read arbitrary files from the system by appending path traversal characters to the filename when...

CVE-2022-44153

Rapid Software LLC Rapid SCADA 5.8.4 is vulnerable to Cross Site Scripting XSS...

Cross site scripting

Rapid Software LLC Rapid SCADA 5.8.4 is vulnerable to Cross Site Scripting XSS...

CVE-2022-44153

Affected product: Rapid SCADA 5.8.4. Vulnerability: Cross Site Scripting (XSS) in Rapid SCADA 5.8.4 (CVE-2022-44153). The connected sources confirm the issue exists in this version and describe an XSS vulnerability but do not provide exploit details or root-cause specifics. CVSS v3.1 metrics indi...

Rapid Software Rapid SCADA 跨站脚本漏洞

Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. A security vulnerability exists in Rapid Software Rapid SCADA version 5.8.4 that originates from an attacker who can implement cross-site scripting...

PT-2022-27124 · Unknown · Rapid Scada

Name of the Vulnerable Software and Affected Versions: Rapid SCADA version 5.8.4 Description: The issue is related to Cross Site Scripting XSS, which is a type of security vulnerability that can be exploited by attackers to inject malicious scripts into a website or application. No information is...

CVE-2020-22722

Rapid Software LLC Rapid SCADA 5.8.0 is affected by a local privilege escalation vulnerability in the ScadaAgentSvc.exe executable file. An attacker can obtain admin privileges by placing a malicious .exe file in the application and renaming it ScadaAgentSvc.exe, which would result in executing t...

Privilege escalation

Rapid Software LLC Rapid SCADA 5.8.0 is affected by a local privilege escalation vulnerability in the ScadaAgentSvc.exe executable file. An attacker can obtain admin privileges by placing a malicious .exe file in the application and renaming it ScadaAgentSvc.exe, which would result in executing t...

CVE-2020-22722

Rapid Software LLC Rapid SCADA 5.8.0 is affected by a local privilege escalation vulnerability in the ScadaAgentSvc.exe executable file. An attacker can obtain admin privileges by placing a malicious .exe file in the application and renaming it ScadaAgentSvc.exe, which would result in executing t...