3541 matches found
CISA Releases Two Industrial Control Systems Advisories
CISA released two Industrial Control Systems ICS advisories on April 25, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-115-01 Keysight N8844A Data Analytics Web Service ICSA-23-115-02 Scada-LTS Third Party...
The vulnerability of the multi-platform web solution for creating Scada systems, Scada-LTS, related to authentication errors, allows a intruder to escalate their privileges.
The vulnerability of the multi-platform web solution for creating Scada systems is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Siemens SIMATIC TIA Portal Path Traversal (SSA-116924)
Binary data scadasiemenstiassa-116924.nbin...
The vulnerability of the AVEVA Plant SCADA system and the AVEVA Telemetry Server, caused by deficiencies in authentication procedures, allows a intruder to trigger a service failure.
The vulnerabilities of the AVEVA Plant SCADA system and the AVEVA Telemetry Server are due to deficiencies in the authentication process. Exploiting these vulnerabilities allows a malicious actor, who may act remotely without having undergone identity verification, to cause service failures...
The vulnerability of the software for configuring Schneider Electric EcoStruxure Operator Terminal Expert HMI terminals and the SCADA Pro-face BLUE software lies in the lack of security measures taken to protect the SQL query structure, allowing a hacker to execute arbitrary code.
The vulnerability of the software for configuring Schneider Electric EcoStruxure Operator Terminal Expert HMI terminals and the SCADA Pro-face BLUE software is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability could allow an attacker to execute...
CVE-2023-30459
SmartPTT SCADA 1.1.0.0 allows remote code execution when the attacker has administrator privileges by writing a malicious C script and executing it on the server via server settings in the administrator control panel on port 8101, by default...
CVE-2023-30459
SmartPTT SCADA 1.1.0.0 allows remote code execution when the attacker has administrator privileges by writing a malicious C script and executing it on the server via server settings in the administrator control panel on port 8101, by default...
Design/Logic Flaw
SmartPTT SCADA 1.1.0.0 allows remote code execution when the attacker has administrator privileges by writing a malicious C script and executing it on the server via server settings in the administrator control panel on port 8101, by default...
CVE-2023-30459
SmartPTT SCADA 1.1.0.0 allows remote code execution when the attacker has administrator privileges by writing a malicious C script and executing it on the server via server settings in the administrator control panel on port 8101, by default...
(Pwn2Own) Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...
CVE-2023-30459
SmartPTT SCADA 1.1.0.0 allows remote code execution when the attacker has administrator privileges by writing a malicious C script and executing it on the server via server settings in the administrator control panel on port 8101, by default...
CVE-2023-30459
CVE-2023-30459 affects SmartPTT SCADA 1.1.0.0. The vulnerability enables remote code execution by writing a malicious C# script and executing it on the server via the administrator control panel (port 8101 by default) when the attacker has administrator privileges. This is supported by multiple c...
Exploit for CVE-2023-30459
CVE-2023-30459 SmartPTT SCADA 1.1.0.0 allows remote code execu...
CVE-2022-41976
An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticated in the application as a low-privileged user to change role e.g., to administrator by updating their user profile...
Privilege escalation
An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticated in the application as a low-privileged user to change role e.g., to administrator by updating their user profile...
CVE-2022-41976
Summary: CVE-2022-41976 affects Scada-LTS v2.7.1.1 build 2948559113. A privileged escalation exists where an authenticated, low-privileged user can modify their own user profile to gain higher rights (e.g., administrator). The root cause is an authorization issue in the user profile update pathwa...
CVE-2022-41976
An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticated in the application as a low-privileged user to change role e.g., to administrator by updating their user profile...
CVE-2022-41976
An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticated in the application as a low-privileged user to change role e.g., to administrator by updating their user profile...
Schneider Electric 1.0 Insecure Direct Object Reference
Exploit Title: Schneider Electric v1.0 - Directory traversal & Broken Authentication Google Dork: inurl:/scada-vis Date: 3/11/2023 Exploit Author: parsa rezaie khiabanloo Vendor Homepage: https://www.se.com/ Version: all-versions Tested on: Windows/Linux/Android Attacker can using these dorks and...
Scada-LTS 安全漏洞
Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A security vulnerability exists in Scada-LTS version 2.7.1.1, which originates when an attacker elevates privileges by updating a user profile...