CVE-2024-7901 Scada-LTS Message Scada cross site scripting

A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Scada-LTS/app.shtm/alarms/Scada of the component Message Handler. The manipulation leads to cross site scripting. The attack can be launched...

PT-2024-8682 · Scada-Lts · Scada-Lts

Name of the Vulnerable Software and Affected Versions: Scada-LTS version 2.7.8 Description: A vulnerability has been found in the Message Handler component of Scada-LTS, related to the file /Scada-LTS/app.shtm/alarms/Scada. The manipulation leads to cross-site scripting. The attack can be launche...

Scada-LTS 跨站脚本漏洞

Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A cross-site scripting vulnerability exists in Scada-LTS version 2.7.8, which stems from unknown functionality in the file /Scada-LTS/app.shtm/alarms/Scada that results in cross-site scripting...

Schneider Electric Accutech Manager Buffer Overflow

Binary data scadaschneiderelectricaccutechmanager280.nbin...

The vulnerability of the SCADA system MasterSCADA 4D arises from incorrect restrictions on the path to the restricted access catalog. This allows intruders to read and write arbitrary files and execute arbitrary commands.

The vulnerability of the SCADA system MasterSCADA 4D is related to an incorrect restriction on the path to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to read and write arbitrary files, as well as execute arbitrary commands...

Triangle MicroWorks SCADA Data Gateway Authentication Missing Vulnerability

Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle MicroWorks, Inc. A lack of authentication vulnerability exists in Triangle MicroWorks SCADA Data Gateway, which can be exploited by remote attackers to obtain sensitive information...

Triangle MicroWorks SCADA Data Gateway Hard-Coded Authentication Bypass Vulnerability

Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle MicroWorks, Inc. A hard-coded authentication bypass vulnerability exists in Triangle MicroWorks SCADA Data Gateway, which can be exploited by an attacker to bypass authentication on the system...

Triangle MicroWorks SCADA Data Gateway Information Disclosure Vulnerability

Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle MicroWorks, Inc. An information disclosure vulnerability exists in Triangle MicroWorks SCADA Data Gateway, which can be exploited by attackers to obtain sensitive information...

Triangle MicroWorks SCADA Data Gateway Arbitrary File Write Vulnerability

Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle MicroWorks, Inc. Triangle MicroWorks SCADA Data Gateway suffers from an arbitrary file write vulnerability that can be exploited by an attacker to write arbitrary files and execute arbitrary code...

Triangle MicroWorks SCADA Data Gateway Remote Code Execution Vulnerability

Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle MicroWorks, Inc. A remote code execution vulnerability exists in Triangle MicroWorks SCADA Data Gateway, which can be exploited by an attacker to execute arbitrary code in the root context...

Siemens SIMATIC WinCC Information Disclosure Vulnerability (CNVD-2024-32687)

Siemens SIMATIC PCS 7 is a process control system from Siemens, Germany.SIMATIC WinCC is an automated data acquisition and monitoring SCADA system.SIMATIC WinCC Runtime Professional is a runtime platform for operator visualization, machine and device control and monitoring. equipment control and...

CVE-2024-2882

CVE-2024-2882 affects SDG Technologies PnPSCADA (web-based SCADA HMI). Connected sources (CISA ICS advisory ICSA-24-179-02, Red Hat CVE page, NVD/NIST entries) confirm a missing authorization flaw (CWE-862) that allows a remote attacker to attach various entities without authenticating, potential...

CVE-2024-2882 Missing Authorization in SDG Technologies PnPSCADA

SDG Technologies PnPSCADA allows a remote attacker to attach various entities without requiring system authentication. This breach could potentially lead to unauthorized control, data manipulation, and access to sensitive information within the SCADA system...

SDG Technologies PnPSCADA

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : SDG Technologies Equipment : PnPSCADA Vulnerability : Missing Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to attach various...

LAquis SCADA LGX Report STRING WRITETOFILE Path Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation of...

LAquis SCADA LGX Report TextFile OpenWithoutMemory Path Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation of...

LAquis SCADA LGX Report Table Save Path Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation of...

LAquis SCADA LGX Report File Open Path Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation of...

Siemens (China) Ltd. WinCC suffers from Denial of Service Vulnerability (CNVD-C-2024-309044)

WinCC is a SCADA system for a wide range of industries that allows you to access devices, extract smart data, analyze data and report on it from your mobile. A denial of service vulnerability exists in Siemens China Ltd WinCC, which can be exploited by attackers to cause a denial of service...

LAquis SCADA LGX Report Processing AddComboFile Path Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation of...