CVE-2024-8232

SpiderControl SCADA Web Server has a vulnerability that could allow an attacker to upload specially crafted malicious files without authentication...

CVE-2024-8232

CVE-2024-8232 affects SpiderControl SCADA Web Server (iniNet Solutions GmbH). The vulnerability allows unauthenticated upload of specially crafted files via the web server, with potential to log in or execute arbitrary code. Affected products in ICS advisories include SpiderControl SCADA Web Serv...

CVE-2024-8232: Unrestricted Upload of File with Dangerous Type

SpiderControl SCADA Web Server has a vulnerability that could allow an attacker to upload specially crafted malicious files without authentication...

SpiderControl SCADA Web Server Path Restriction DoS

The vulnerability of the SpiderControl SCADA Web Server exists due to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PT-2022-16603

Name of the Vulnerable Software and Affected Versions ClearSCADA All Versions EcoStruxure Geo SCADA Expert 2019 All Versions EcoStruxure Geo SCADA Expert 2020 All Versions Description A CWE-295: Improper Certificate Validation issue exists, allowing a Man-in-the-Middle attack when communications...

SpiderControl SCADA Web Server 2.02.0007 Improper Privilege Management Vulnerability

SpiderControl SCADA Web Server versions 2.02.0007 and below suffer from an improper privilege management vulnerability. Vendor: SpiderControl Equipment: SCADA Web Server Vulnerability: Improper Privilege Management Advisory URL...

SpiderControl SCADA Web Server 2.02.0007 Improper Privilege Management

Vendor: SpiderControl Equipment: SCADA Web Server Vulnerability: Improper Privilege Management Advisory URL https://ipositivesecurity.com/2017/10/28/ics-spidercontrol-scada-web-server-improper-privilege-management-vulnerability/ ICS-CERT Advisory...

CVE-2017-12728: Improper Privilege Management

An Improper Privilege Management issue was discovered in SpiderControl SCADA Web Server Version 2.02.0007 and prior. Authenticated, non-administrative local users are able to alter service executables with escalated privileges, which could allow an attacker to execute arbitrary code under the...

CVE-2017-12728

SpiderControl SCADA Web Server is affected: Version 2.02.0007 and earlier suffer from improper privilege management (CWE-269). Authenticated, non-administrative local users can modify the service executable with escalated privileges, potentially enabling arbitrary code execution in the context of...

PT-2017-3120

Name of the Vulnerable Software and Affected Versions SpiderControl SCADA Web Server versions 2.02.0007 and prior Description An issue with improper privilege management was found, allowing authenticated, non-administrative local users to modify service executables with elevated privileges. This...

SpiderControl SCADA Web Server

CVSS v3 5.3 ATTENTION: Low skill level to exploit Vendor: SpiderControl Equipment: SCADA Web Server Vulnerability: Improper Privilege Management AFFECTED PRODUCTS The following versions of SCADA Web Server, a software management platform, are affected: SCADA Web Server Version 2.02.0007 and prior...

CVE-2017-12694: Improper Limitation of a Pathname to a Restricted Directory

A Directory Traversal issue was discovered in SpiderControl SCADA Web Server. An attacker may be able to use a simple GET request to perform a directory traversal into system files...

PT-2017-12653

Name of the Vulnerable Software and Affected Versions SpiderControl SCADA Web Server affected versions not specified Description A Directory Traversal issue was discovered, allowing an attacker to potentially use a simple GET request to perform a directory traversal into system files, leading to...

SpiderControl SCADA Web Server

CVSS v3 5.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: SpiderControl Equipment: SCADA Web Server Vulnerability: Directory Traversal AFFECTED PRODUCTS The following versions of SpiderControl SCADA Web Server, a software management platform, are affected: SCADA Web Server...

IniNet Solutions GmbH SCADA Web Server Code Execution

The multiple vulnerabilities of IniNet Solutions GmbH’s SCADA Web Server are caused by buffer overflows in the stack. Exploitation of these vulnerabilities could allow a malicious actor to execute arbitrary code using a long HTTP request field...

iniNet SpiderControl SCADA Web Server Service 2.02 - Insecure File Permissions

iniNet SpiderControl SCADA Web Server Service 2.02 - Insecure File Permissions iniNet SpiderControl SCADA Web Server Service 2.02 Insecure File Permissions Vendor: iniNet Solutions GmbH Product web page: http://www.spidercontrol.net Affected version: 2.02.0000 Summary: Modular and automated...

iniNet SpiderControl SCADA Web Server Service 2.02 Insecure File Permissions

Summary Modular and automated engineering is provided for HMI and SCADA. The tools are developed to join a large range of engineering modules together quickly. We modularize our software, as the mechanics of a system are modularized today. Easy to visualize with a few clicks. Description...

IniNet Solutions SCADA Web Server < 2.02.0000

Binary data 9011.prm...

IniNet Solutions SCADA Web Server Detection

Binary data 9010.prm...

IniNet Solutions SCADA Web Server Buffer Overflow Vulnerability

IniNet SCADA Web Server is a third-party web-based server software. A buffer overflow vulnerability exists in IniNet Solutions SCADA Web Server that can be exploited by an attacker to execute arbitrary code...