EUVD-2020-28655

Malware in sbrugna...

CVE-2020-7530

CVE-2020-7530 affects SCADAPack 7x Remote Connect ≤ 3.6.3.574, with a CWE-285 improper authorization flaw that enables access to executable code folders. Root cause: insufficient/authentication weakness in the authorization mechanism. Consequence: potential unauthorized access to folders containi...

CVE-2020-7529: Improper Limitation of a Pathname to a Restricted Directory

A CWE-22 Improper Limitation of a Pathname to a Restricted Directory 'Path Transversal' vulnerability exists in SCADAPack 7x Remote Connect V3.6.3.574 and prior which allows an attacker to place content in any unprotected folder on the target system using a crafted .RCZ file...

PT-2020-19618

Name of the Vulnerable Software and Affected Versions SCADAPack 7x Remote Connect versions 3.6.3.574 and prior Description A vulnerability exists due to improper access control, allowing an attacker to place executables in a specific folder and run code whenever Remote Connect is executed by the...

CVE-2020-7530: Improper Authorization

A CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect V3.6.3.574 and prior which allows improper access to executable code folders...

CVE-2020-7528: Deserialization of Untrusted Data

A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect V3.6.3.574 and prior which could allow arbitrary code execution when an attacker builds a custom .PRJ file containing a malicious serialized buffer...

PT-2020-19615

Name of the Vulnerable Software and Affected Versions SCADAPack 7x Remote Connect versions V3.6.3.574 and prior Description A Deserialization of Untrusted Data issue exists, which could allow arbitrary code execution when an attacker builds a custom .PRJ file containing a malicious serialized...

CVE-2020-7531: Improper Access Control

A CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect V3.6.3.574 and prior which allows an attacker to place executables in a specific folder and run code whenever RemoteConnect is executed by the user...

PT-2020-19616

Name of the Vulnerable Software and Affected Versions SCADAPack 7x Remote Connect versions 3.6.3.574 and prior Description A path transversal issue exists, allowing an attacker to place content in any unprotected folder on the target system using a crafted .RCZ file. This enables the attacker to...