CVE-2022-21155

A specially crafted packet sent to the Fernhill SCADA Server Version 3.77 and earlier may cause an exception, causing the server process FHSvrService.exe to exit...

CVE-2022-21155: Uncontrolled Resource Consumption

A specially crafted packet sent to the Fernhill SCADA Server Version 3.77 and earlier may cause an exception, causing the server process FHSvrService.exe to exit...

PT-2022-14887

Name of the Vulnerable Software and Affected Versions Fernhill SCADA Server versions 3.77 and earlier Description A specially crafted packet sent to the server may cause an exception, leading to the server process FHSvrService.exe to exit. Recommendations For Fernhill SCADA Server versions 3.77 a...

CVE-2022-24321

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADA server when receiving a malformed HTTP request. Affected Product: ClearSCADA All Versions, EcoStruxure Geo SCADA Expert 2019 All Versions, EcoStruxure Geo...

CVE-2022-24317

A CWE-862: Missing Authorization vulnerability exists that could cause information exposure when an attacker sends a specific message. Affected Product: Interactive Graphical SCADA System Data Server V15.0.0.22020 and prior...

Fernhill Software Fernhill Scada Server 资源管理错误漏洞

Fernhill Software Fernhill Scada Server is a free runtime Scada from Fernhill Software, UK. A resource management error vulnerability exists in Fernhill Software Fernhill SCADA Server that stems from the server's lack of effective filtering and processing of message formats. An attacker sending...

PT-2021-6930 · Elcomplus · Elcomplus Smartptt

Name of the Vulnerable Software and Affected Versions: Elcomplus SmartPTT affected versions not specified Description: The issue is related to authorization errors in the Elcomplus SmartPTT scada-server, allowing a low-authenticated user to access higher-level administration authorization. This c...

PT-2021-6929

Name of the Vulnerable Software and Affected Versions Elcomplus SmartPTT SCADA Server affected versions not specified Description The issue is related to the disclosure of information. It allows a remote attacker to reveal protected information by requesting various files from the server without...

PT-2021-6931

Name of the Vulnerable Software and Affected Versions Elcomplus SmartPTT SCADA Server affected versions not specified Description The issue is related to insufficient verification of the source of HTTP requests. This can allow a remote attacker to perform a CSRF attack using a specially crafted w...

PT-2021-6932

Name of the Vulnerable Software and Affected Versions Elcomplus SmartPTT affected versions not specified Description The issue is related to the injection of JavaScript code into a specific parameter, which can be executed when accessing the dashboard or the main page. This can allow a remote...

PT-2021-6927

Name of the Vulnerable Software and Affected Versions Elcomplus SmartPTT affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the update loading function of the scada-server. This could allow a remote attacker to execute arbitrary cod...

CVE-2020-6970

A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 if Modbus or ROC Interfaces have been installed and are in use and all versions of OpenEnterprise 3.1 through 3.3.3, where a specially crafted script could execute code on the OpenEnterprise Server...

Heap overflow

A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 if Modbus or ROC Interfaces have been installed and are in use and all versions of OpenEnterprise 3.1 through 3.3.3, where a specially crafted script could execute code on the OpenEnterprise Server...

CVE-2020-6970

The CVE-2020-6970 issue affects Emerson OpenEnterprise SCADA Server: OpenEnterprise Server 2.83 (with Modbus or ROC Interfaces in use) and OpenEnterprise 3.1–3.3.3. It is a heap-based buffer overflow enabling a specially crafted script to execute code on the OpenEnterprise Server. Mitigation per ...

CVE-2020-6970: Heap-based Buffer Overflow

A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 if Modbus or ROC Interfaces have been installed and are in use and all versions of OpenEnterprise 3.1 through 3.3.3, where a specially crafted script could execute code on the OpenEnterprise Server...

Emerson OpenEnterprise

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: Emerson Equipment: OpenEnterprise SCADA Server Vulnerability: Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute code on an OpenEnterprise SCADA...

Certec EDV atvise SCADA server 2.5.9 Privilege Escalation Vulnerability

Summary atvise scada is based on newest technologies and standards: The visualization in pure web technology as well as a consistent vertical object orientation based on OPC UA changes the world of process management systems. Description The application suffers from an unquoted search path issue...

Ecava IntegraXor SCADA Server权限访问漏洞

No description provided by source...

CVE-2015-0990

Untrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local users to gain privileges via a renamed DLL in the default install directory...

Design/Logic Flaw

Untrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local users to gain privileges via a renamed DLL in the default install directory...