Privilege escalation

Rapid Software LLC Rapid SCADA 5.8.0 is affected by a local privilege escalation vulnerability in the ScadaAgentSvc.exe executable file. An attacker can obtain admin privileges by placing a malicious .exe file in the application and renaming it ScadaAgentSvc.exe, which would result in executing t...

CVE-2020-22722

Rapid Software LLC Rapid SCADA 5.8.0 is affected by a local privilege escalation vulnerability in the ScadaAgentSvc.exe executable file. An attacker can obtain admin privileges by placing a malicious .exe file in the application and renaming it ScadaAgentSvc.exe, which would result in executing t...

CVE-2020-22722

CVE-2020-22722 affects Rapid SCADA 5.8.0. A local privilege escalation affects the ScadaAgentSvc.exe binary: an attacker can place a malicious .exe in the application and rename it to ScadaAgentSvc.exe, causing the service to execute as NT AUTHORITY\SYSTEM and grant full system access. Attacks de...

Advantech WebAccess/SCADA suffers from an arbitrary file deletion vulnerability (CNVD-2020-48624)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA. An attacker can exploit the vulnerability to delete arbitrary files...

Advantech WebAccess/SCADA suffers from an arbitrary file deletion vulnerability (CNVD-2020-48623)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. An arbitrary file deletion vulnerability exists in Advantech WebAccess/SCADA. An attacker can exploit the vulnerability to delete arbitrary files...

Advantech WebAccess/SCADA suffers from a command execution vulnerability (CNVD-2020-48619)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. A command execution vulnerability exists in Advantech WebAccess/SCADA. An attacker could exploit the vulnerability to execute console commands...

Advantech WebAccess/SCADA suffers from a command execution vulnerability (CNVD-2020-48618)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. A command execution vulnerability exists in Advantech WebAccess/SCADA. An attacker could exploit the vulnerability to execute console commands...

Advantech WebAccess/SCADA has a Logic Flaw Vulnerability

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. A logic flaw vulnerability exists in Advantech WebAccess/SCADA. The vulnerability can be exploited to gain access to modify the registry of a user's system and execute arbitrary commands on the user's system...

Advantech WebAccess/SCADA suffers from a command execution vulnerability (CNVD-2020-48621)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. A command execution vulnerability exists in Advantech WebAccess/SCADA. An attacker could exploit the vulnerability to execute console commands...

Advantech WebAccess/SCADA suffers from information disclosure vulnerability (CNVD-2020-48622)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. An information disclosure vulnerability exists in Advantech WebAccess/SCADA. The vulnerability can be exploited to obtain sensitive information such as remote connection passwords, backend administrator...

Advantech WebAccess/SCADA suffers from a logic flaw vulnerability (CNVD-2020-48617)

Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. A logic flaw vulnerability exists in Advantech WebAccess/SCADA. The vulnerability can be exploited to gain access to modify the registry of a user's system and execute arbitrary commands on the user's system...

Advantech WebAccessNode Denial of Service Vulnerability in Advantech (China) Co.

Advantech WebAccessNode is a fully Internet Explorer based HMI/SCADA monitoring software. A denial of service vulnerability exists in Advantech WebAccessNode, which can be exploited by attackers to cause a denial of service on the system...

Inductive Automation Ignition - Remote Code Execution

This Metasploit module exploits a Java deserialization vulnerability in the Inductive Automation Ignition SCADA... This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Inductive Automation Ignition...

Inductive Automation Ignition Remote Code Execution Exploit

This Metasploit module exploits a Java deserialization vulnerability in the Inductive Automation Ignition SCADA product, versions 8.0.0 to and including 8.0.7. This exploit was tested on versions 8.0.0 and 8.0.7 on both Linux and Windows. The default configuration is exploitable by an...

Inductive Automation Ignition Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Inductive Automation Ignition Remote Code Execution', 'Description' = %q This module exploits a Java deserialization vulnerability in the Inducti...

Denial of Service Vulnerability in WebAccess Node at Advantech (China) Co.

WebAccess Node is a fully Internet Explorer-based HMI/SCADA monitoring software from Advantech China Co. A denial of service vulnerability exists in Advantech China WebAccess Node, which can be exploited by attackers to cause a denial of service...

Advantech (China) Co., Ltd. WebAccess Node suffers from Denial of Service Vulnerability (CNVD-2020-45127)

WebAccess Node is a fully Internet Explorer-based HMI/SCADA monitoring software from Advantech China Co. A denial of service vulnerability exists in Advantech China WebAccess Node, which can be exploited by attackers to cause a denial of service...

Advantech WebAccess SCADA Arbitrary File Deletion

An arbitrary file deletion vulnerability exists in Advantech WebAccess. The vulnerability is due to insufficient validation on user supplied paths before using them in file operations within BwPSLink.exe...

Snake Ransomware Delivers Double-Strike on Honda, Energy Co.

The Snake ransomware has reportedly hit two high-profile companies this week: Honda and a South American energy-distribution company called Enel Argentina. In a tweet on Monday, the Honda Automobile Customer Service said it was “experiencing technical difficulties and are unavailable.” And later,...

CVE-2020-12004

The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway versions prior to 8.0.10 and Ignition 7 Gateway versions prior to 7.9.14, allowing an attacker to obtain sensitive information. Recent assessments: cdelafuente-r7 at June 26, 2020 11:13am UTC...