EUVD-2017-7905

Malware in sbrugna...

Geovap Reliance 4 SCADA/HMI Cross-Site Scripting Vulnerability

Geovap Reliance 4 SCADA/HMI is an industrial process and building automation monitoring system from GEOVAP in the Czech Republic. A security vulnerability exists in Geovap Reliance 4 SCADA/HMI 4.7.3 Update 3 and earlier versions. An attacker can exploit the vulnerability to inject arbitrary code...

GEOVAP Reliance 4 SCADA/HMI

1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: GEOVAP Equipment: Reliance 4 SCADA/HMI Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to use HTTP proxy...

Geovap Reliance SCADA XSS Vulnerability

Geovap Reliance SCADA is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Geovap Reliance SCADA Detection (HTTP)

This scripts sends an HTTP GET request to figure out whether a Geovap Reliance SCADA system is installed on the target host, and, if so, which version. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2017-16721

A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerability could allow an unauthenticated attacker to inject arbitrary code...

Cross site scripting

A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerability could allow an unauthenticated attacker to inject arbitrary code...

CVE-2017-16721

A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerability could allow an unauthenticated attacker to inject arbitrary code...

CVE-2017-16721

Geovap Reliance SCADA is affected by CVE-2017-16721, an XSS vulnerability in versions 4.7.3 Update 2 and prior. An unauthenticated attacker could inject arbitrary code via a crafted URL, potentially enabling read/write access in the affected system. ICS-CERT reports a fixed version 4.7.3 Update 3...

CVE-2017-16721

A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerability could allow an unauthenticated attacker to inject arbitrary code...

Geovap Reliance SCADA Cross-Site Scripting Vulnerability

Reliance is a professional SCADA/HMI system designed for the visualization and control of industrial processes as well as building and home automation. A cross-site scripting vulnerability exists in Geovap Reliance SCADA that allows an unauthenticated attacker to inject arbitrary code...

GEOVAP Reliance SCADA

CVSS v3 6.1 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: GEOVAP Equipment: Reliance SCADA Vulnerability: Cross-site Scripting AFFECTED PRODUCTS The following versions of Reliance SCADA, a software management platform, are affected: Reliance SCADA Version 4.7.3 Update 2 and...

GEOVAP Reliance 4 Control Server Privilege Escalation Vulnerability

GEOVAP Reliance 4 Control Server suffers from an unquoted search path issue impacting the service 'RelianceOpcDaWrapper' for Windows deployed as part of Reliance 4 SCADA/HMI system installer including Reliance OPC Server. This could potentially allow an authorized but non-privileged local user to...

GEOVAP Reliance 4 Control Server Privilege Escalation

GEOVAP Reliance 4 Control Server Unquoted Service Path Elevation Of Privilege Vendor: GEOVAP, spol. s r.o. Product web page: http://www.geovap.cz http://www.reliance.cz http://www.reliance-scada.com Affected version: 4.7.1 Revision 25172 Summary: Reliance is a professional SCADA/HMI system...

GEOVAP Reliance 4 Control Server Unquoted Service Path Elevation Of Privilege

Summary Reliance is a professional SCADA/HMI system designed for the visualization and control of industrial processes and for building automation. Description The application suffers from an unquoted search path issue impacting the service 'RelianceOpcDaWrapper' for Windows deployed as part of...