3468 matches found
Rapid Software Rapid SCADA Trust Management Issue Vulnerability
Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. Rapid Software Rapid SCADA 5.8.4 and prior versions have a trust management issue vulnerability that stems from the use of hard-coded credentials, which allows an attacker to connect to a specific por...
Rapid Software Rapid SCADA Path Traversal Vulnerability
Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. A security vulnerability exists in Rapid Software Rapid SCADA version 5.8.4 and earlier, which stems from the presence of a path traversal vulnerability. An attacker can exploit this vulnerability to...
Rapid Software LLC Rapid SCADA
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely, low attack complexity Vendor: Rapid Software LLC Equipment: Rapid SCADA Vulnerabilities: Path Traversal, Relative Path Traversal, Local Privilege Escalation through Incorrect Permission Assignment for Critical Resource,...
PT-2024-1450 · Unknown · Rapid Scada
Name of the Vulnerable Software and Affected Versions: Rapid SCADA versions prior to 5.8.4 Description: The issue is related to incorrect permission assignment for a critical resource in the SCADA system. This may allow an attacker to escalate their privileges. An authorized user can write direct...
PT-2024-1448 · Unknown · Rapid Scada
Name of the Vulnerable Software and Affected Versions: Rapid SCADA versions prior to Version 5.8.4 Description: The issue is related to a Zip Slip vulnerability in the unpacking routine, allowing an attacker to supply a malicious configuration file and achieve remote code execution. This can be...
PT-2024-1444 · Unknown · Rapid Scada
Name of the Vulnerable Software and Affected Versions: Rapid SCADA versions prior to Version 5.8.4 Description: The issue is related to the use of open redirection due to incorrect data cleaning on the user login page. This allows an attacker to redirect users to malicious pages through the login...
PT-2024-1447 · Unknown · Rapid Scada
Name of the Vulnerable Software and Affected Versions: Rapid SCADA versions prior to 5.8.4 Description: The issue is related to the storage of passwords in plaintext. This may allow an attacker with local access to obtain unauthorized access to protected information. Recommendations: For versions...
PT-2024-1445 · Unknown · Rapid Scada
Name of the Vulnerable Software and Affected Versions: Rapid SCADA versions prior to 5.8.4 Description: The issue is related to errors in handling relative path to directory, allowing an attacker to read arbitrary files from the system by appending path traversal characters to the filename when...
PT-2024-1446 · Unknown · Rapid Scada
Name of the Vulnerable Software and Affected Versions: Rapid SCADA versions prior to 5.8.4 Description: The issue is related to shortcomings in the error reporting mechanism of the SCADA system. It allows a remote attacker to gain unauthorized access to protected information by sending a speciall...
Siemens Spectrum Power 7 Critical Resource Privilege Assignment Error Vulnerability
Spectrum Power 7 provides the essential components of SCADA, communications and data modeling for control and monitoring systems. Application suites can be added to optimize network and generation management in all areas of energy management. Siemens Spectrum Power 7 suffers from a misassigned...
AdvantechWeb / SCADA 9.1.5U SQL Injection Vulnerability
AdvantechWeb/SCADA version 9.1.5U suffers from a post authentication remote SQL injection vulnerability. ;; PostAuth SQLi in AdvantechWeb/SCADA 9.1.5U ;; ;; found: 28.12.2023 ;; ;; more: ;; https://code610.blogspot.com/2024/01/postauth-sqli-in-advantechwebscada-915u.html ;; POST...
AdvantechWeb/SCADA 9.1.5U SQL Injection
;; PostAuth SQLi in AdvantechWeb/SCADA 9.1.5U ;; ;; found: 28.12.2023 ;; ;; more: ;; https://code610.blogspot.com/2024/01/postauth-sqli-in-advantechwebscada-915u.html ;; POST /waconfig/api/odbc/getSystemLog HTTP/2 Host: 192.168.56.106 Cookie: serverLanguage=en;...
Rockwell FactoryTalk Services Platform < 6.20 Deserialization
The version of Rockwell FactoryTalk Services Platform installed on the remote Windows host is prior to 6.20. It is, therefore, affected by a vulnerability. - Factory Talk Diagnostics exposes a .NET Remoting endpoint via RNADiagnosticsSrv.exe at TCP/8082, which can insecurely deserialize untrusted...
PT-2023-8327 · Scada-Lts · Scada-Lts
Name of the Vulnerable Software and Affected Versions: Scada-LTS versions 2.7.5.2 build 4551883606 and before Description: The issue is related to insufficient access control in the Event Handlers function of the Scada-LTS mult-platform web solution for creating Scada systems. This allows remote...
The vulnerability of the microprogrammed software of the ABB AC700F and AC900F controllers, as well as the ABB Freelance SCADA system, relates to the possibility of buffer overflows based on stacks. This allows a hacker to cause the controller to stop working.
The vulnerability of the microprogramming software for ABB AC700F and AC900F controllers, as well as the ABB Freelance SCADA system, relates to the possibility of buffer overflows based on stacks. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause the...
PT-2023-9241 · Unknown · Masterscada 4D
Name of the Vulnerable Software and Affected Versions: MasterSCADA 4D affected versions not specified Description: The issue is related to insufficient restriction of authentication attempts in the MasterSCADA 4D system. This can be exploited by a remote attacker to perform a brute force attack...
The vulnerability of the TRACE MODE SCADA system, related to unencrypted storage of user credentials, allows a hacker to replace one user’s password hash with another and gain access to the SCADA system.
The vulnerability of the TRACE MODE SCADA system is related to the unencrypted storage of user credentials. Exploiting this vulnerability could allow a perpetrator to replace the password hash for one user with that of another user and gain access to the SCADA system...
CVE-2023-6061
Rejected reason: This CVE ID has been rejected/withdrawn by its CVE Numbering Authority Palo Alto Networks based on discussions with Mitsubishi Electronics Corporation's PSIRT...
Design/Logic Flaw
Multiple components of Iconics SCADA Suite are prone to a Phantom DLL loading vulnerability. This issue arises from the applications improperly searching for and loading dynamic link libraries, potentially allowing an attacker to execute malicious code via a DLL with a matching name in an...
