CVE-2022-24310: Integer Overflow or Wraparound

A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages. Affected Product: Interactive Graphical SCADA System Data Serv...

CVE-2022-24315: Out-of-bounds Read

A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server V15.0.0.22020 and prior...

CVE-2022-24317: Missing Authorization

A CWE-862: Missing Authorization vulnerability exists that could cause information exposure when an attacker sends a specific message. Affected Product: Interactive Graphical SCADA System Data Server V15.0.0.22020 and prior...

PT-2022-2279

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System Data Server versions V15.0.0.22020 and prior Description A denial of service issue exists due to an out-of-bounds read. This could be triggered by an attacker sending a specially crafted message, potentially...

PT-2022-2281

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System Data Server versions V15.0.0.22020 and prior Description A vulnerability exists that could cause modification of an existing file by adding to the end of the file or create a new file in the context of the Da...

PT-2022-1814

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System Data Server versions V15.0.0.22020 and prior Description The issue is related to an out-of-bounds read, which could cause memory leaks and potentially result in denial of service. This can happen when an...

PT-2022-2282

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System Data Server versions V15.0.0.22020 and prior Description The issue is caused by an integer overflow or wraparound, leading to a heap-based buffer overflow. This could allow a remote attacker to cause a denial...

PT-2022-2280

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System Data Server versions V15.0.0.22020 and prior Description The issue is caused by a stack-based buffer overflow due to a buffer copy without checking the size of the input. This could potentially lead to remote...

PT-2022-1815

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System Data Server versions V15.0.0.22020 and prior Description A vulnerability exists that could cause modification of an existing file by inserting at the beginning of the file or create a new file in the context ...

mySCADA myPRO OS Command Injection Vulnerability (CNVD-2021-102827)

mySCADA myPRO is an HMI/SCADA system designed primarily for the visualization and control of industrial processes. An operating system command injection vulnerability exists in mySCADA myPRO, which can be exploited by an attacker to inject arbitrary operating system commands via specific paramete...

mySCADA myPRO Operating System Command Injection Vulnerability

mySCADA myPRO is an HMI/SCADA system designed primarily for the visualization and control of industrial processes. An operating system command injection vulnerability exists in mySCADA myPRO, which can be exploited by an attacker to inject arbitrary operating system commands...

mySCADA myPRO security vulnerabilities

mySCADA myPRO is an HMI/SCADA system designed primarily for the visualization and control of industrial processes. An authentication bypass vulnerability exists in mySCADA myPRO, which can be exploited by an attacker to access the application without any form of authentication or authorization...

mySCADA myPRO operating system command injection vulnerability

mySCADA myPRO is an HMI/SCADA system designed primarily for the visualization and control of industrial processes. An operating system command injection vulnerability exists in mySCADA myPRO, which can be exploited by an attacker to inject arbitrary operating system commands via specific paramete...

Xylem AquaView

1. EXECUTIVE SUMMARY CVSS v3 9.3 ATTENTION: Low attack complexity Vendor: Xylem, Inc. Equipment: AquaView Vulnerability: Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an authenticated local attacker to create users, delete users,...

Distributed Data Systems WebHMI File Upload Vulnerability

Distributed Data Systems WebHmi is a Scada system with a built-in web server from Distributed Data Systems, Ukraine. It is used for monitoring and controlling any automation system on the local network as well as over the Internet from computers and mobile devices. A file upload vulnerability...

Distributed Data Systems WebHmi Authorization Issues Vulnerability

Distributed Data Systems WebHmi is a Scada system with a built-in web server from Distributed Data Systems, Ukraine. It is used for monitoring and controlling any automation system on the local network as well as over the Internet from computers and mobile devices. Distributed Data Systems WebHmi...

Distributed Data Systems WebHmi code-related vulnerabilities

Distributed Data Systems WebHmi is a Scada system with a built-in web server from Distributed Data Systems, Ukraine. It is used for monitoring and controlling any automation system on the local network as well as over the Internet from computers and mobile devices. A file upload vulnerability...

PT-2021-8062

Name of the Vulnerable Software and Affected Versions GENESIS64 affected versions not specified Description The issue is related to errors in the code of the GraphWorX64 module in the GENESIS64 SCADA system. Exploitation of this issue could allow a remote attacker to execute arbitrary code...

PT-2021-15219

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System Data Collector dc.exe version 15.0.0.21243 and prior Description A missing authentication issue for critical functions could allow the deletion of arbitrary files in the context of the user running the softwa...

PT-2021-7785

Name of the Vulnerable Software and Affected Versions Interactive Graphical SCADA System Data Collector dc.exe versions V15.0.0.21243 and prior Description A vulnerability exists due to missing validation of user-supplied data in network messages, which could cause disclosure of arbitrary files...