Design/Logic Flaw

A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An "improper neutralization of HTTP headers for scripting syntax" issue has been identified, which may allow remote code execution...

Cross site scripting

A Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. This may allow remote code execution...

CVE-2017-6029

A Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. This may allow remote code execution...

CVE-2017-6031

A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An "improper neutralization of HTTP headers for scripting syntax" issue has been identified, which may allow remote code execution...

CVE-2017-6029

A Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. This may allow remote code execution...

CVE-2017-6031

A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An "improper neutralization of HTTP headers for scripting syntax" issue has been identified, which may allow remote code execution...

CVE-2017-6031

A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An "improper neutralization of HTTP headers for scripting syntax" issue has been identified, which may allow remote code execution...

PT-2017-16844

Name of the Vulnerable Software and Affected Versions atvise scada versions prior to 3.0 Description A Cross-Site Scripting issue was discovered in atvise scada, which may allow remote code execution. Recommendations For versions prior to 3.0, update to version 3.0 or later to resolve the issue...

PT-2017-16846

Name of the Vulnerable Software and Affected Versions atvise scada versions prior to 3.0 Description A Header Injection issue has been identified in the software, which is caused by an improper neutralization of HTTP headers for scripting syntax. This issue may allow remote code execution...

CVE-2017-6031

CVE-2017-6031 affects Certec EDV GmbH atvise scada pre-3.0. The issue is improper neutralization of HTTP headers for scripting syntax (header injection) that may enable remote code execution. Affected: atvise scada prior to version 3.0; exploitability is remotely possible. Mitigation: upgrade to ...

CVE-2017-6031: Improper Neutralization of HTTP Headers for Scripting Syntax

A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An "improper neutralization of HTTP headers for scripting syntax" issue has been identified, which may allow remote code execution...

CVE-2017-6029: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. This may allow remote code execution...

CVE-2017-6029

A Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. This may allow remote code execution...

CVE-2017-6029

CVE-2017-6029 affects Certec EDV GmbH atvise SCADA prior to version 3.0, describing two related issues: a Cross-Site Scripting vulnerability (CWE-79) and a header injection bug (CWE-644) that together may enable remote code execution. The NVD entry confirms the XSS as the primary CVE-2017-6029 it...

LAquis SCADA dll Hijacking Vulnerability

LAquis SCADA is the tool and language for data collection, process supervision, industrial automation, storage and report generation for quality management and application development. LAquis SCADA suffers from a dll hijacking vulnerability. The vulnerability is caused due to the LAquis SCADA...

LAquis SCADA Software Web Server Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of LAquis SCADA Software. Authentication is not required to exploit this vulnerability. The specific flaw exists within global processing of requests inside the web server. The issue results...

PT-2017-16837

Name of the Vulnerable Software and Affected Versions LAquis SCADA software versions prior to 4.1.0.3237 Description The issue concerns a directory traversal information disclosure problem. It arises because the software does not properly neutralize external input, allowing users to potentially...

Schneider Electric Interactive Graphical SCADA DLL Load Remote Code Execution Vulnerability

Schneider Electric Interactive Graphical SCADA System Software is a suite of automation software for process control and supervision of SCADA systems from the French company Schneider Electric SchneiderElectric. A DLL loading remote code execution vulnerability exists in Schneider Electric...

CVE-2017-6033

A DLL Hijacking issue was discovered in Schneider Electric Interactive Graphical SCADA System IGSS Software, Version 12 and previous versions. The software will execute a malicious file if it is named the same as a legitimate file and placed in a location that is earlier in the search path...

CVE-2017-6033

Schneider Electric IGSS (Interactive Graphical SCADA System) Software Versions 12 and earlier are affected by a DLL Hijacking vulnerability (CVE-2017-6033) due to Uncontrolled Search Path Element (CWE-427). The issue arises when a malicious DLL with the same name as a legitimate file is placed in...