EUVD-2024-34051

Malicious code in bioql PyPI...

CVE-2024-11220

A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself. Any code within the rdlx file of the report executes with SYSTEM privileges, resulting in privilege escalation...

CVE-2024-11220

A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself. Any code within the rdlx file of the report executes with SYSTEM privileges, resulting in privilege escalation...

CVE-2024-11220

CVE-2024-11220 affects Open Automation Software (OAS). A local, low-privilege user with credentials to the running OAS services can create and run an rdlx report file on the server , causing code in the rdlx to execute with SYSTEM privileges and perform privilege escalation. Reported impact align...

CVE-2024-11220: Incorrect Execution-Assigned Permissions

A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself. Any code within the rdlx file of the report executes with SYSTEM privileges, resulting in privilege escalation...

Open Automation Software security vulnerabilities

Open Automation Software OAS is an enterprise automation system from Open Automation Software, Inc. for visualizing, controlling, converting, and transferring data between virtually any industrial automation device or platform. A security vulnerability exists in versions prior to Open Automation...

PT-2024-16837

Name of the Vulnerable Software and Affected Versions Open Automation Software versions prior to 20.00.0076 Description A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself. Any code...