PT-2020-19616

Name of the Vulnerable Software and Affected Versions SCADAPack 7x Remote Connect versions 3.6.3.574 and prior Description A path transversal issue exists, allowing an attacker to place content in any unprotected folder on the target system using a crafted .RCZ file. This enables the attacker to...

PT-2020-19619

Name of the Vulnerable Software and Affected Versions SCADAPack x70 Security Administrator versions 1.2.0 and prior Description A Deserialization of Untrusted Data issue exists, which could allow arbitrary code execution when an attacker builds a custom .SDB file containing a malicious serialized...

CVE-2020-7530: Improper Authorization

A CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect V3.6.3.574 and prior which allows improper access to executable code folders...

Schneider Electric SCADAPack VxWorks Debugger漏洞

施耐德电气集团对能源和基础设施、工业、数据中心和网络、楼宇以及住宅等领域提供产品和服务。 Schneider Electric SCADAPack 330, 334, 350, 357产品由于启用了VxWorks调试代理存在安全漏洞，远程攻击者通过发送特制的请求到UDP端口17185，利用此漏洞可控制受影响设备。 0 Schneider Electric SCADAPack 35x Schneider Electric SCADAPack 33x 厂商补丁： Schneider Electric ------------------...