The vulnerability of the PROCON-WIN SCADA system, which stems from the use of rigidly encoded account data, allows a intruder to increase their privileges.

The vulnerability of the PROCON-WIN SCADA system is related to the use of strictly encrypted account data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Schneider Electric EcoStruxure Geo SCADA Expert Multiple Vulnerabilities (SEVD-2023-010-02)

Binary data schneiderelectricecostruxuregeoscadaexpertsevd-2023-010-02.nbin...

Schneider Electric EcoStruxure Geo SCADA Expert Web Server Detection

Binary data schneiderelectricecostruxuregeoscadaexpertwebdetect.nbin...

CVE-2022-21155

A specially crafted packet sent to the Fernhill SCADA Server Version 3.77 and earlier may cause an exception, causing the server process FHSvrService.exe to exit...

CVE-2022-41976

An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticated in the application as a low-privileged user to change role e.g., to administrator by updating their user profile...

CVE-2020-13550

A local file inclusion vulnerability exists in the installation functionality of Advantech WebAccess/SCADA 9.0.1. A specially crafted application can lead to information disclosure. An attacker can send an authenticated HTTP request to trigger this vulnerability...

CVE-2024-21852

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration file by utilizing a Zip Slip vulnerability in the unpacking routine to achieve remote code execution...

CVE-2024-21764

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials, which may allow an attacker to connect to a specific port...

CVE-2024-22016

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may allow privilege escalation...

Iran-Linked IOCONTROL Malware Targets SCADA and Linux-Based IoT Platforms

Iran-affiliated threat actors have been linked to a new custom malware that's geared toward IoT and operational technology OT environments in Israel and the United States. The malware has been codenamed IOCONTROL by OT cybersecurity company Claroty, highlighting its ability to attack IoT and...

The vulnerability of the Mitsubishi Electric FA Connector in the GENESIS64 SCADA system allows a intruder to gain unauthorized access to read, modify, or delete data, execute arbitrary code, or cause a service failure.

The vulnerability of the Mitsubishi Electric FA Connector in the GENESIS64 SCADA system is related to the presence of unused code. Exploiting this vulnerability could allow an intruder to gain unauthorized access to read, modify, or delete data, execute arbitrary code, or cause service failures...

The vulnerability of the GENESIS64 SCADA system lies in the software packages for monitoring and data collection by MC Works64. This vulnerability allows a intruder to execute arbitrary code.

The vulnerability of the GENESIS64 SCADA system’s software packages for monitoring and data collection, provided by MC Works64, is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code by introducing a specially...

PT-2024-41439 · Ооо 'Теконавтоматика' · Scada-Система 'Текон'

Уязвимость SCADA-системы «Текон», связанная с передачей учетных данных в незашифрованном виде. Эксплуатация уязвимости, может позволить нарушителю, действующему удаленно выполнить атаку «человек посередине» MITM...

The vulnerability of the Message Handler component in the multi-platform web solution for creating Scada systems, Scada-LTS, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Message Handler component in the multi-platform web solution for creating Scada systems is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks...

mySCADA myPRO Manager Directory Traversal Vulnerability

mySCADA myPRO is a professional HMI/SCADA system designed primarily for the visualization and control of industrial processes. A directory traversal vulnerability exists in mySCADA myPRO Manager, which can be exploited by an attacker to submit a special request to view the contents of a system fi...

The vulnerability of the Power Monitoring Expert, Power Operation, and Power SCADA Operation software allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Power Monitoring Expert, Power Operation, and Power SCADA Operation software relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks from a remote location...

PT-2024-41476 · Moxa · Moxa Eds-P510

Уязвимость микропрограммного обеспечения коммутаторов Moxa EDS-P510 связана с ошибками разграничения доступа к катушке Modbus/TCP. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии и изменить функции устройства в средах SCADA и DCS...

The vulnerability of the LAquis SCADA data collection and process control tool, related to the lack of protective measures for the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the LAquis SCADA data collection and process control tool is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the GENESIS64 SCADA system’s software packages for monitoring and data collection, provided by MC Works64, allows a intruder to trigger maintenance failures or gain access to protected information.

The vulnerability of the SCADA system GENESIS64, related to the software packages for monitoring and data collection from MC Works64, stems from the improper use of standard permissions. Exploiting this vulnerability can allow an intruder to trigger maintenance failures or gain access to protecte...

CVE-2024-10313

iniNet Solutions SpiderControl SCADA PC HMI Editor has a path traversal vulnerability. When the software loads a malicious ‘ems' project template file constructed by an attacker, it can write files to arbitrary directories. This can lead to overwriting system files, causing system paralysis, or...