CVE-2024-21869 Plaintext Storage of a Password in Rapid SCADA

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product stores plaintext credentials in various places. This may allow an attacker with local access to see them...

CVE-2024-21869 Plaintext Storage of a Password in Rapid SCADA

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product stores plaintext credentials in various places. This may allow an attacker with local access to see them...

CVE-2024-21869

Affected product: Rapid SCADA (Rapid Software LLC). Vulnerable component: plaintext storage of credentials in Rapid SCADA versions prior to 5.8.4. Root cause: credentials stored in plaintext in various locations, enabling disclosure with local access. Impact: confidentiality of credentials can be...

CVE-2024-21764

CVE-2024-21764 affects Rapid SCADA, specifically versions prior to 5.8.4. The issue is caused by the use of hard-coded credentials, which may allow a remote attacker to connect to a specific port and, according to the PT-2024-1449 entry, could enable full control of the system. Remediation guidan...

CVE-2024-21764 Use of Hard-Coded Credentials in Rapid SCADA

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials, which may allow an attacker to connect to a specific port...

CVE-2024-21764 Use of Hard-Coded Credentials in Rapid SCADA

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials, which may allow an attacker to connect to a specific port...

CVE-2024-21794 Open Redirect in Rapid SCADA

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can redirect users to malicious pages through the login page...

CVE-2024-21794

CVE-2024-21794 affects Rapid SCADA before version 5.8.4. The issue is an open redirect on the login page caused by improper data handling, allowing an attacker to redirect users to malicious pages. Affected product: Rapid SCADA (Rapid Software LLC). Root cause: open redirection via login page. Im...

CVE-2024-21794 Open Redirect in Rapid SCADA

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can redirect users to malicious pages through the login page...

CVE-2024-22016 Incorrect Permission Assignment for Critical Resource in Rapid SCADA

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may allow privilege escalation...

CVE-2024-22016 Incorrect Permission Assignment for Critical Resource in Rapid SCADA

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may allow privilege escalation...

CVE-2024-22016

Rapid SCADA (Rapid Software LLC) before version 5.8.4 is affected by CVE-2024-22016: an authenticated user can write directly to the Scada directory due to incorrect permission assignment for a critical resource, enabling local privilege escalation. Affected versions: prior to 5.8.4. Impact: pote...

CVE-2024-21852

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration file by utilizing a Zip Slip vulnerability in the unpacking routine to achieve remote code execution...

CVE-2024-22096

Summary of CVE-2024-22096 (Rapid SCADA) Rapid SCADA (Rapid Software LLC) versions prior to 5.8.4 are vulnerable to a path traversal issue. An attacker can append path traversal characters to the filename via a specific command, enabling reading of arbitrary files from the system. The issue is tie...

CVE-2024-22096 Relative Path Traversal in Rapid SCADA

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can append path traversal characters to the filename when using a specific command, allowing them to read arbitrary files from the system...

CVE-2024-22096 Relative Path Traversal in Rapid SCADA

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can append path traversal characters to the filename when using a specific command, allowing them to read arbitrary files from the system...

CVE-2024-21852

CVE-2024-21852 affects Rapid SCADA (Rapid Software LLC) prior to 5.8.4. A Zip Slip vulnerability in the unpacking routine lets an attacker supply a malicious configuration file to achieve remote code execution. The issue arises from improper restriction of pathnames during archive extraction, ena...

CVE-2024-21852 Rapid SCADA Path Traversal

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration file by utilizing a Zip Slip vulnerability in the unpacking routine to achieve remote code execution...

CVE-2024-21852 Rapid SCADA Path Traversal

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration file by utilizing a Zip Slip vulnerability in the unpacking routine to achieve remote code execution...

The vulnerability of the Event Handlers function in the multi-platform web solution for creating Scada systems, Scada-LTS, allows attackers to escalate privileges, execute arbitrary code, and obtain confidential information.

The vulnerability of Event Handlers in the multi-platform web solution for creating Scada systems is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to elevate privileges, execute arbitrary code, and obtain confidential information...