The vulnerability of the SGIUtility component in the HMI terminal configuration software for Schneider Electric EcoStruxure Operator Terminal Expert and the SCADA Pro-face BLUE software allows a malicious individual to execute arbitrary code.

The vulnerability of the SGIUtility component in Schneider Electric’s HMI terminal configuration software, as well as in the SCADA Pro-face BLUE software, is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to execute arbitrary...

Sql injection

Improper Handling of Parameters vulnerability in Ipack Automation Systems Ipack SCADA Software allows : Blind SQL Injection.This issue affects Ipack SCADA Software: from unspecified before 1.1.0...

CVE-2021-3958 SQL Injection Vulnerability in Ipack SCADA Software

Improper Handling of Parameters vulnerability in Ipack Automation Systems Ipack SCADA Software allows : Blind SQL Injection.This issue affects Ipack SCADA Software: from unspecified before 1.1.0...

CVE-2021-3958

CVE-2021-3958 is a SQL injection vulnerability in IPack SCADA Automation Software caused by improper handling of parameters. It affects IPack SCADA Software versions prior to 1.1.0 and is described as Blind SQL Injection with potential for remote exploitation over network. Public records indicate...

Advantech WebAccess Stack Buffer Overflow Vulnerability (CNVD-2021-80266)

Advantech WebAccess is Advantech's suite of HMI/SCADA software based on browser architecture. A stack buffer overflow vulnerability exists in Advantech WebAccess 9.02 and earlier versions. An attacker could exploit this vulnerability to remotely execute code...

Advantech WebAccess

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Advantech Equipment: WebAccess Vulnerabilities: Heap-based Buffer Overflow, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to...

Advantech WebAccess Stack Buffer Overflow Vulnerability (CNVD-2021-80272)

Advantech WebAccess is Advantech's suite of HMI/SCADA software based on a browser architecture. A stack buffer overflow vulnerability exists in Advantech WebAccess 9.02 and earlier versions. The vulnerability stems from a lack of proper validation of the length of user-supplied data. An attacker...

Advantech WebAccess/SCADA Path Traversal Vulnerability (CNVD-2021-59235)

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. A path traversal vulnerability exists in Advantech WebAccess/SCADA, which stems from the product's failure to add access rights to input data. An attacker could use the vulnerability ...

Advantech WebAccess/SCADA Open Redirect Vulnerability

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. An open redirection vulnerability exist...

The vulnerability of the client-server data processing and technical operations control application Proficy HMI/SCADA CIMPLICITY, due to lack of access control mechanisms, allows attackers to execute arbitrary code or escalate their privileges.

The vulnerability of the client-server data processing and technical operations control application Proficy HMI/SCADA CIMPLICITY is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary code or enhance their privileges...

Schneider Electric IGSS SCADA Software

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Schneider Electric Equipment: IGSS Interactive Graphical SCADA System Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of these...

Advantech WebAccess/SCADA Local Elevation of Privilege Vulnerability (CNVD-2021-11304)

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A local elevation of privilege...

Advantech WebAccess/SCADA Local Elevation of Privilege Vulnerability (CNVD-2021-11306)

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A local elevation of privilege...

CVE-2020-7545

A CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software see security notification for version information that could allow for arbitrary code execution on the server when an authorized user access an affected webpage...

CVE-2020-7546

A CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software see security notification for version information that could allow an attacker to perform actions on behalf of the authorized user when...

CVE-2020-7546

A CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software see security notification for version information that could allow an attacker to perform actions on behalf of the authorized user when...

CVE-2020-7547

A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software see security notification for version information that could allow a user the ability to perform actions via the web interface at a higher privilege level...

Design/Logic Flaw

A CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software see security notification for version information that could allow an attacker to perform actions on behalf of the authorized user when...

Improper access control

A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software see security notification for version information that could allow a user the ability to perform actions via the web interface at a higher privilege level...

CVE-2020-7547

CVE-2020-7547 concerns an improper access control vulnerability in Schneider Electric EcoStruxure and SmartStruxure Power Monitoring and SCADA Software. The common description across sources states that a user can perform actions via the web interface at a higher privilege level, indicating privi...