Advisories

보안 권고 이 저장소에는 침투 테스트 중 발견되어 보고된 여러 취약점이 포함되어 있습니다. 이 저장소의 모든 콘텐츠는 교육 목적으로만 제공됩니다. 링크 https://www.securityweek.com/organizations-notified-of-remotely-exploitable-vulnerabilities-in-aveva-hmi-scada-products/ https://www.cisa.gov/news-events/ics-advisories/icsa-22-342-02...

CVE-2025-69985

FUXA ≤ 1.2.8 Обход аутентификации + RCE CVE-2025-69985 📜 Описание Этот эксплойт на Python нацелен на CVE-2025-69985 — критическую уязвимость обхода аутентификации в FUXA веб-SCADA/HMI-программное обеспечение версиях ≤ 1.2.8. Отправляя специально сформированный JSON-полезную нагрузку со встроенным...

CVE-2025-69985

CVE-2025-69985: Эксплойт обхода аутентификации до RCE в FUXA ≤1.2.8 📌 Общее описание Этот репозиторий содержит Концептуальное доказательство PoC и подробную техническую документацию по уязвимости CVE-2025-69985 , затрагивающей FUXA версии ≤1.2.8. Уязвимость позволяет неаутентифицированному...

FUXAPWN

CVE-2026-25895 — FUXA = 1.2.9 인증되지 않은 경로 탐색을 통한 원격 코드 실행 인증되지 않은, 사전 인증 임의 파일 쓰기: Node.js 기반 SCADA/HMI 플랫폼인 FUXA를 대상으로 합니다. 여러 가지 별개의 사후 쓰기 프리미티브를 통해 원격 코드 실행으로 이어집니다. 취약한 엔드포인트에 미들웨어가 연결되어 있지 않기 때문에 secureEnabled = true인증 켜짐 상태에서도 작동합니다. ExploitDB에서도 확인 가능:...

The vulnerability of the high-performance operator panels from the SIMATIC HMI Unified Comfort Panels Standard family lies in their unsafe initialization of resources, allowing attackers to gain unauthorized access to the web browser.

The vulnerability of the high-performance operator panels from the SIMATIC HMI Unified Comfort Panels Standard family relates to the insecure initialization of resources. Exploiting this vulnerability could allow an intruder to gain unauthorized access to the web browser...

CVE-2026-30512

A local privilege escalation vulnerability exists in the Restricted Access Kiosk Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5. The vulnerability affects the external PDF viewer functionality used to display the application manual and its interaction with the underlyi...

EUVD-2026-64900

A local privilege escalation vulnerability exists in the Restricted Access Kiosk Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5. The vulnerability affects the external PDF viewer functionality used to display the application manual and its interaction with the underlyi...

CVE-2026-30512

A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5 . The flaw resides in the external PDF viewer used to display the application manual and its interaction with the underlying Windows operating system . An...

CVE-2026-30512

A local privilege escalation vulnerability exists in the Restricted Access Kiosk Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5. The vulnerability affects the external PDF viewer functionality used to display the application manual and its interaction with the underlyi...

CVE-2026-65985

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, the device-webapi-request Socket.IO handler in server/runtime/index.js permits an authenticated non-admin runtime user to control property.address, causing the FUXA server to issue an outbound HTTP or...

CVE-2026-47720

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.3.2, the TDengine DAQ storage connector's escapeTdString function in server/runtime/storage/tdengine/index.js doubles single quotes but does not escape backslashes. A remote unauthenticated attacker can submit a...

CVE-2026-67443 FUXA: Unauthenticated guest JWT bypasses Node-RED secure-mode authorization gate (Remote Script Execution)

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, the allowDashboard authorization gate in server/integrations/node-red/index.js calls authJwt.verify for /nodered without inspecting the decoded identity. When nodeRedEnabled is true, secureEnabled is tru...

CVE-2026-67443 FUXA: Unauthenticated guest JWT bypasses Node-RED secure-mode authorization gate (Remote Script Execution)

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, the allowDashboard authorization gate in server/integrations/node-red/index.js calls authJwt.verify for /nodered without inspecting the decoded identity. When nodeRedEnabled is true, secureEnabled is tru...

CVE-2026-65985 FUXA: SSRF hardening for `device-webapi-request`

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, the device-webapi-request Socket.IO handler in server/runtime/index.js permits an authenticated non-admin runtime user to control property.address, causing the FUXA server to issue an outbound HTTP or...

PT-2026-77308

Name of the Vulnerable Software and Affected Versions FUXA versions prior to 1.3.3 Description An authorization bypass exists in the allowDashboard gate within server/integrations/node-red/index.js where authJwt.verify is called for the /nodered endpoint without inspecting the decoded identity...

CVE-2026-19188 Haiwell IoT Cloud HMI Gateway OS Command Injection

A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature accessible via the /setting endpoint. The cmdPing Socket.io event fails to properly sanitize user-supplied input before passing it to t...

CVE-2026-19188

A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature accessible via the /setting endpoint. The cmdPing Socket.io event fails to properly sanitize user-supplied input before passing it to t...

Haiwell IoT Cloud HMI Gateway

ADVISORY SUMMARY Successful exploitation of this vulnerability may allow an attacker to inject and execute arbitrary OS commands with root privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize...

CVE-2026-47717

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In fuxa-server version 1.3.0, the GET /api/project endpoint exposes sensitive project configuration data to guest-context requests even when secureEnabled is enabled. Version 1.3.1 fixes the issue...

CVE-2026-47718 FUXA provides guest and invalid-token access to protected read APIs in secure mode

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. When secureEnabled=true, FUXA 1.3.0-2773 still allows guest and invalid-token requests to read project, alarms, and scheduler APIs. Version 1.3.1 fixes this issue...