PT-2023-1019 · Schneider Electric · Ecostruxure Geo Scada Expert +1

Name of the Vulnerable Software and Affected Versions: EcoStruxure Geo SCADA Expert versions 2019 through 2021 prior to October 2022 ClearSCADA versions prior to the fixed version Description: A vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific...

PT-2023-1235 · Schneider Electric · Ecostruxure Geo Scada Expert +1

Name of the Vulnerable Software and Affected Versions: EcoStruxure Geo SCADA Expert versions 2019 through 2021 ClearSCADA all versions Description: A vulnerability exists that could cause information disclosure when specific messages are sent to the server over the database server TCP port. This...

The vulnerability of the AVEVA Edge SCADA system, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the AVEVA Edge SCADA system is related to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

ARC Informatique PcVue

1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION: Low attack complexity Vendor: ARC Informatique Equipment: PcVue Vulnerabilities: Cleartext Storage of Sensitive Information, Insertion of Sensitive Information into Log File 2. UPDATE OR REPOSTED INFORMATION This updated advisory is a follow-up to the...

The vulnerability of the AVEVA Edge InstallShield SCADA system’s installation component allows a perpetrator to execute arbitrary code or enhance their privileges.

The vulnerability of the AVEVA Edge InstallShield SCADA system’s installation component is related to the possibility of replacing the dynamic library. Exploiting this vulnerability could allow a intruder to execute arbitrary code or enhance their privileges...

The vulnerability of the AVEVA Edge SCADA system, related to bypassing the path when using the UNC resource for Windows, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the AVEVA Edge SCADA system relates to bypassing the path when using the UNC path for general Windows resources “\UNC\share\name”. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information by sending a specially crafted HTT...

AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere

1. EXECUTIVE SUMMARY --------- Begin Update A Part 1 of 6 --------- CVSS v3 9.8 --------- End Update A Part 1 of 6 --------- ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: AVEVA --------- Begin Update A Part 2 of 6 --------- Equipment: InTouch Access...

CVE-2022-44153

Rapid Software LLC Rapid SCADA 5.8.4 is vulnerable to Cross Site Scripting XSS...

Cross site scripting

Rapid Software LLC Rapid SCADA 5.8.4 is vulnerable to Cross Site Scripting XSS...

CVE-2022-44153

Affected product: Rapid SCADA 5.8.4. Vulnerability: Cross Site Scripting (XSS) in Rapid SCADA 5.8.4 (CVE-2022-44153). The connected sources confirm the issue exists in this version and describe an XSS vulnerability but do not provide exploit details or root-cause specifics. CVSS v3.1 metrics indi...

PT-2022-27124 · Unknown · Rapid Scada

Name of the Vulnerable Software and Affected Versions: Rapid SCADA version 5.8.4 Description: The issue is related to Cross Site Scripting XSS, which is a type of security vulnerability that can be exploited by attackers to inject malicious scripts into a website or application. No information is...

Rapid Software Rapid SCADA 跨站脚本漏洞

Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. A security vulnerability exists in Rapid Software Rapid SCADA version 5.8.4 that originates from an attacker who can implement cross-site scripting...

AVEVA Edge DLL Hijacking Vulnerability

AVEVA Edge is a highly scalable and flexible HMI/SCADA software from AVEVA Software UK. A DLL hijacking vulnerability exists in AVEVA Edge 2020 R and prior versions, which could be exploited by an attacker to compromise the confidentiality, availability or integrity of a system. Details of the...

AVEVA Edge has an information disclosure vulnerability

AVEVA Edge is a highly scalable and flexible HMI/SCADA software from the UK-based Jianwei Software AVEVA. An information disclosure vulnerability exists in AVEVA Edge version 2020 R2, which can be exploited by an attacker to obtain account information for accessing external DB resource...

GE CIMPLICITY HMI/SCADA Software Buffer Overflow Vulnerability

GE CIMPLICITY HMI/SCADA Software is an automated industrial platform from General Electric GE. It provides true client-server visualization and control from a single machine to plant locations around the world, helping to manage operations and improve decision making. A buffer overflow...

Unspecified Vulnerability in AVEVA Edge

AVEVA Edge is a highly scalable and flexible HMI/SCADA software from AVEVA Software UK. A security vulnerability exists in AVEVA Edge 2020 R2 and prior versions that can be exploited by an attacker to potentially compromise the confidentiality, availability or integrity of the system. Details of...

GE CIMPLICITY HMI/SCADA Software has an unspecified vulnerability

GE CIMPLICITY HMI/SCADA Software is an automation industrial platform from General Electric GE, Inc. It provides true client-server visualization and control from a single machine to plant locations around the world to help manage operations and improve decision making.GE CIMPLICITY HMI/SCADA...

GE CIMPLICITY HMI/SCADA Software 缓冲区错误漏洞

GE CIMPLICITY HMI/SCADA Software is an automated industrial platform from General Electric GE. It provides true client-server visualization and control from a single machine to plant locations around the world to help manage operations and improve decision making. A security vulnerability exists ...

GE CIMPLICITY HMI/SCADA Software 缓冲区错误漏洞

GE CIMPLICITY HMI/SCADA Software is an automation industrial platform from General Electric GE, Inc. It provides true client-server visualization and control from a single machine to plant locations around the world to help manage operations and improve decision making.GE CIMPLICITY HMI/SCADA...

GE CIMPLICITY

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: GE Equipment: CIMPLICITY Vulnerabilities: Access of Uninitialized Pointer, Heap-based Buffer Overflow, Untrusted Pointer Dereference, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities...