CVE-2024-21794 Open Redirect in Rapid SCADA

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can redirect users to malicious pages through the login page...

CVE-2024-22016 Incorrect Permission Assignment for Critical Resource in Rapid SCADA

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may allow privilege escalation...

CVE-2024-22016

Rapid SCADA (Rapid Software LLC) before version 5.8.4 is affected by CVE-2024-22016: an authenticated user can write directly to the Scada directory due to incorrect permission assignment for a critical resource, enabling local privilege escalation. Affected versions: prior to 5.8.4. Impact: pote...

CVE-2024-22016 Incorrect Permission Assignment for Critical Resource in Rapid SCADA

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may allow privilege escalation...

CVE-2024-21852

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration file by utilizing a Zip Slip vulnerability in the unpacking routine to achieve remote code execution...

CVE-2024-22096 Relative Path Traversal in Rapid SCADA

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can append path traversal characters to the filename when using a specific command, allowing them to read arbitrary files from the system...

CVE-2024-22096

Summary of CVE-2024-22096 (Rapid SCADA) Rapid SCADA (Rapid Software LLC) versions prior to 5.8.4 are vulnerable to a path traversal issue. An attacker can append path traversal characters to the filename via a specific command, enabling reading of arbitrary files from the system. The issue is tie...

CVE-2024-22096 Relative Path Traversal in Rapid SCADA

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can append path traversal characters to the filename when using a specific command, allowing them to read arbitrary files from the system...

CVE-2024-21852 Rapid SCADA Path Traversal

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration file by utilizing a Zip Slip vulnerability in the unpacking routine to achieve remote code execution...

CVE-2024-21852

CVE-2024-21852 affects Rapid SCADA (Rapid Software LLC) prior to 5.8.4. A Zip Slip vulnerability in the unpacking routine lets an attacker supply a malicious configuration file to achieve remote code execution. The issue arises from improper restriction of pathnames during archive extraction, ena...

CVE-2024-21852 Rapid SCADA Path Traversal

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration file by utilizing a Zip Slip vulnerability in the unpacking routine to achieve remote code execution...

CVE-2024-22096: Relative Path Traversal

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can append path traversal characters to the filename when using a specific command, allowing them to read arbitrary files from the system...

CVE-2024-21794: URL Redirection to Untrusted Site

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can redirect users to malicious pages through the login page...

CVE-2024-22016: Incorrect Permission Assignment for Critical Resource

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may allow privilege escalation...

CVE-2024-21869: Plaintext Storage of a Password

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product stores plaintext credentials in various places. This may allow an attacker with local access to see them...

CVE-2024-21866: Generation of Error Message Containing Sensitive Information

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product responds back with an error message containing sensitive data if it receives a specific malformed request...

CVE-2024-21764: Use of Hard-coded Credentials

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials, which may allow an attacker to connect to a specific port...

CVE-2024-21852: Improper Limitation of a Pathname to a Restricted Directory

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration file by utilizing a Zip Slip vulnerability in the unpacking routine to achieve remote code execution...

The vulnerability of the Event Handlers function in the multi-platform web solution for creating Scada systems, Scada-LTS, allows attackers to escalate privileges, execute arbitrary code, and obtain confidential information.

The vulnerability of Event Handlers in the multi-platform web solution for creating Scada systems is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to elevate privileges, execute arbitrary code, and obtain confidential information...

CVE-2023-33472

An issue was discovered in Scada-LTS v2.7.5.2 build 4551883606 and before, allows remote attackers with low-level authentication to escalate privileges, execute arbitrary code, and obtain sensitive information via Event Handlers function...