CVE-2023-39468: Exposed Dangerous Method or Function

Triangle MicroWorks SCADA Data Gateway DbasSectorFileToExecuteOnReset Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is require...

Triangle MicroWorks SCADA Data Gateway 安全漏洞

Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle MicroWorks, Inc. An arbitrary code execution vulnerability exists in Triangle MicroWorks SCADA Data Gateway, which can be exploited by an attacker to execute arbitrary code...

Triangle MicroWorks SCADA Data Gateway 安全漏洞

Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product developed by Triangle MicroWorks, Inc. and is mainly used for data acquisition and monitoring in industrial automation control systems. A file upload vulnerability exists in Triangle MicroWorks SCADA Data Gateway, which stems...

CVE-2023-39467: Storage of File with Sensitive Data Under Web Root

Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to exploit this vulnerability...

CVE-2023-39459: Improper Limitation of a Pathname to a Restricted Directory

Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. User interaction is required to exploit this vulnerability in...

CVE-2023-39464: Unquoted Search Path or Element

Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploit this...

CVE-2023-39458: Use of Hard-coded Credentials

Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to exploit th...

CVE-2023-36021

Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability...

Security feature bypass

Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability...

CVE-2023-36021 Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability

...

CVE-2023-36021

CVE-2023-36021 affects Microsoft On-Prem Data Gateway and is described as a security feature bypass. The provided documents do not include concrete technical details (root cause, affected versions, exploit vectors, or specific fixes). CVSSv3 metrics in the Initial document indicate a high-severit...

CVE-2023-36021 Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability

...

Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability

...

CVE-2023-36021: Improper Input Validation

Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability...

The vulnerability of the SCADA system SCADA Data Gateway (SDG) arises from improper processing of output data for registration logs, allowing a intruder to execute arbitrary code.

The vulnerability of the SCADA system SCADA Data Gateway SDG is related to the improper processing of output data for registration logs. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the root user...

The vulnerability of the data exchange software between SCADA systems, Triangle MicroWorks SCADA Data Gateway (SDG), allows a intruder to upload arbitrary files.

The vulnerability of the data exchange software between SCADA systems is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to upload arbitrary files by sending a specially crafted HTTP request...

The vulnerability of the SCADA Data Gateway (SDG) arises from incorrect restrictions on the path to the restricted access catalog. This allows attackers to create or delete arbitrary files under the administrator’s name.

The vulnerability of the SCADA system SCADA Data Gateway SDG is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability allows an attacker to create or delete arbitrary files under the administrator’s name...

The vulnerability of the SCADA system SCADA Data Gateway (SDG) arises from the use of a strictly encrypted cryptographic key. This allows an intruder to gain unauthorized access to protected information.

The vulnerability of the SCADA system SCADA Data Gateway SDG is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an intruder operating remotely to gain unauthorized access to protected information...

The vulnerability of the DbasSectorFileToExecuteOnReset function in the CADA-system’s SCADA Data Gateway allows a intruder to execute arbitrary code.

The vulnerability of the DbasSectorFileToExecuteOnReset function in the CADA-remote monitoring system’s SCADA Data Gateway is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the SYSTEM context remotely...

The vulnerability of the GTWWebMonitorService function in the CADA-system’s SCADA Data Gateway allows a intruder to execute arbitrary code.

The vulnerability of the GTWWebMonitorService function in the CADA-system’s SCADA Data Gateway SDG is related to the absence of quotation marks in the code for elements or search paths. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the root context...