80 matches found
The vulnerability of the SCADA system MasterSCADA, related to deficiencies in password protection mechanisms, allows unauthorized access to the project by intruders.
The vulnerability of the SCADA system MasterSCADA is related to deficiencies in the password protection mechanism. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the project...
The vulnerability of the SCADA system “ENTEK,” related to the use of cryptographic algorithms containing defects, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the SCADA system “ENTEK” is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
Triangle MicroWorks SCADA Data Gateway 安全漏洞
Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle MicroWorks, Inc. A security vulnerability exists in Triangle MicroWorks SCADA Data Gateway that originates from a specific flaw in workspace files that allows remote attackers to create arbitrary files...
Multiple Siemens Products Null Pointer Dereference Vulnerability (CNVD-2024-09314)
SIMATIC PCS 7 is a centralized control system DCS that integrates components such as SIMATIC WinCC, SIMATIC Batch, SIMATIC Route control, OpenPCS 7, etc. SIMATIC WinCC is a Supervisory Control and Data Acquisition SCADA system.SIMATIC WinCC Runtime Professional is a visual runtime platform for...
The vulnerability of the SCADA system EisBaer, related to the disclosure of information, allows a intruder to gain unauthorized access to the protected information.
The vulnerability of the SCADA system of EisBaer is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the SCADA system SCADA Data Gateway (SDG) arises from improper processing of output data for registration logs, allowing a intruder to execute arbitrary code.
The vulnerability of the SCADA system SCADA Data Gateway SDG is related to the improper processing of output data for registration logs. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the root user...
The vulnerability of the SCADA system SCADA Data Gateway (SDG), related to the disclosure of information, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the SCADA system, SCADA Data Gateway SDG, is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the SCADA system SCADA Data Gateway (SDG) arises from the use of pre-set account data, allowing an intruder to gain unauthorized access to protected information.
The vulnerability of the SCADA system SCADA Data Gateway SDG is related to the use of pre-set credentials. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the get_config component of the data exchange software between SCADA systems, such as Triangle MicroWorks SCADA Data Gateway (SDG), allows a intruder to bypass security restrictions and gain unauthorized access to the system.
The vulnerability of the getconfig component of the data exchange software between SCADA systems is related to deficiencies in authentication procedures. Exploiting this vulnerability allows an intruder to bypass security restrictions and gain unauthorized access to the system...
Triangle MicroWorks SCADA Data Gateway File Upload Vulnerability
Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product developed by Triangle MicroWorks, Inc. and is mainly used for data acquisition and monitoring in industrial automation control systems. A file upload vulnerability exists in Triangle MicroWorks SCADA Data Gateway, which stems...
PT-2023-4359 · Triangle Microworks · Triangle Microworks Scada Data Gateway
Name of the Vulnerable Software and Affected Versions: Triangle MicroWorks SCADA Data Gateway affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is...
The vulnerability of SCADA systems such as EcoStruxure Geo SCADA Expert 2020 and EcoStruxure Geo SCADA Expert 2019 lies in the lack of protection for operational data, allowing attackers to disclose sensitive information.
The vulnerability of SCADA systems such as EcoStruxure Geo SCADA Expert 2020, EcoStruxure Geo SCADA Expert 2019, and EcoStruxure Geo SCADA Expert 2021 lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose th...
The vulnerability of SCADA systems such as EcoStruxure Geo SCADA Expert 2020 and EcoStruxure Geo SCADA Expert 2019 lies in access control errors, which allow attackers to trigger service interruptions.
The vulnerability of SCADA systems such as EcoStruxure Geo SCADA Expert 2020 and EcoStruxure Geo SCADA Expert 2019 is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
The vulnerability of the Data Server database in the interactive graphical SCADA system, allowing a intruder to execute arbitrary code.
The vulnerability of the Data Server database in the Interactive Graphical SCADA System IGSS involves copying buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted messages...
The vulnerability of the WMDLCDRV.ini driver of the software used for configuring SCADA systems such as MOSCAD/STS Toolbox and StarControls staRTU allows a intruder to gain unauthorized access to protected information.
The vulnerability of the wmdlcdrv.ini driver of the SCADA system software for MOSCAD/STS Toolbox and StarControls staRTU lies in the use of rigidly encrypted user credentials. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
The vulnerability of the IPGW protocol implementation in MOSCAD SCADA systems, including ACE IP Gateway (CPU 4600), allows a perpetrator to execute arbitrary code.
The vulnerability of the IPGW protocol implementation in MOSCAD SCADA systems, such as ACE IP Gateway CPU 4600, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the SCADA system “SKADA-NEV” arises from the storage of critical information in unencrypted form, allowing attackers to gain access to confidential data.
The vulnerability of the SCADA system “SKADA-NEV” is related to the storage of critical information in unencrypted form. Exploiting this vulnerability can allow an intruder to gain access to confidential information...
The vulnerability of the Elcomplus SmartPPT SCADA server, related to information disclosure, allows a intruder to expose the protected information.
The vulnerability of the Elcomplus SmartPPT SCADA server is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...
Feds: APTs Have Tools That Can Take Over Critical Infrastructure
Threat actors have built and are ready to deploy tools that can take over a number of widely used industrial control system ICS devices, which spells trouble for critical infrastructure providers—particularly those in the energy sector, federal agencies have warned. In a joint advisory, the...
PT-2022-6556 · Triangle Microworks · Scada Data Gateway
Name of the Vulnerable Software and Affected Versions: Triangle MicroWorks SCADA Data Gateway affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existin...