3460 matches found
PT-2024-41476 · Moxa · Moxa Eds-P510
Уязвимость микропрограммного обеспечения коммутаторов Moxa EDS-P510 связана с ошибками разграничения доступа к катушке Modbus/TCP. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии и изменить функции устройства в средах SCADA и DCS...
The vulnerability of the LAquis SCADA data collection and process control tool, related to the lack of protective measures for the website structure, allows attackers to perform cross-site scripting attacks.
The vulnerability of the LAquis SCADA data collection and process control tool is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the GENESIS64 SCADA system’s software packages for monitoring and data collection, provided by MC Works64, allows a intruder to trigger maintenance failures or gain access to protected information.
The vulnerability of the SCADA system GENESIS64, related to the software packages for monitoring and data collection from MC Works64, stems from the improper use of standard permissions. Exploiting this vulnerability can allow an intruder to trigger maintenance failures or gain access to protecte...
CVE-2024-10313
iniNet Solutions SpiderControl SCADA PC HMI Editor has a path traversal vulnerability. When the software loads a malicious ‘ems' project template file constructed by an attacker, it can write files to arbitrary directories. This can lead to overwriting system files, causing system paralysis, or...
CVE-2024-10313 iniNet Solutions SpiderControl SCADA PC HMI Editor Path Traversal
iniNet Solutions SpiderControl SCADA PC HMI Editor has a path traversal vulnerability. When the software loads a malicious ‘ems' project template file constructed by an attacker, it can write files to arbitrary directories. This can lead to overwriting system files, causing system paralysis, or...
CVE-2024-10313 iniNet Solutions SpiderControl SCADA PC HMI Editor Path Traversal
iniNet Solutions SpiderControl SCADA PC HMI Editor has a path traversal vulnerability. When the software loads a malicious ‘ems' project template file constructed by an attacker, it can write files to arbitrary directories. This can lead to overwriting system files, causing system paralysis, or...
CVE-2024-10313
CVE-2024-10313 affects iniNet Solutions SpiderControl SCADA PC HMI Editor. The vulnerability is an improper restriction of a pathname to a restricted directory (path traversal) that is triggered when loading a malicious ‘ems’ project template, allowing writing files to arbitrary directories. Repo...
PT-2024-16180 · Ininet Solutions · Ininet Solutions Spidercontrol Scada Pc Hmi Editor
Name of the Vulnerable Software and Affected Versions: iniNet Solutions SpiderControl SCADA PC HMI Editor affected versions not specified Description: The issue is related to a path traversal vulnerability. When the software loads a malicious ems project template file created by an attacker, it c...
CVE-2024-9414
In LAquis SCADA version 4.7.1.511, a cross-site scripting vulnerability could allow an attacker to inject arbitrary code into a web page. This could allow an attacker to steal cookies, redirect users, or perform unauthorized actions...
CVE-2024-9414 Cross-site Scripting vulnerability in LCDS LAquis SCADA
In LAquis SCADA version 4.7.1.511, a cross-site scripting vulnerability could allow an attacker to inject arbitrary code into a web page. This could allow an attacker to steal cookies, redirect users, or perform unauthorized actions...
CVE-2024-9414 Cross-site Scripting vulnerability in LCDS LAquis SCADA
In LAquis SCADA version 4.7.1.511, a cross-site scripting vulnerability could allow an attacker to inject arbitrary code into a web page. This could allow an attacker to steal cookies, redirect users, or perform unauthorized actions...
CVE-2024-9414
CVE-2024-9414 affects LAquis SCADA 4.7.1.511. An improper neutralization of input during web page generation enables cross-site scripting, allowing an attacker to inject arbitrary code into the page and potentially steal cookies, redirect users, or perform unauthorized actions. LCDS/LAquis SCADA ...
LCDS LAquis SCADA
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.0 ATTENTION : Exploitable remotely/low attack complexity Vendor : LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME Equipment : LAquis SCADA Vulnerability : Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability...
LCDS LAquis SCADA 跨站脚本漏洞
LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of devices that have communication technology. A cross-site scripting vulnerability exists in LCDS LAquis SCADA version...
PT-2024-7364 · Unknown · Laquis Scada
Name of the Vulnerable Software and Affected Versions: LAquis SCADA version 4.7.1.511 Description: A cross-site scripting vulnerability in LAquis SCADA could allow an attacker to inject arbitrary code into a web page, potentially enabling them to steal cookies, redirect users, or perform...
Researchers Uncover Major Security Vulnerabilities in Industrial MMS Protocol Libraries
Details have emerged about multiple security vulnerabilities in two implementations of the Manufacturing Message Specification MMS protocol that, if successfully exploited, could have severe impacts in industrial environments. "The vulnerabilities could allow an attacker to crash an industrial...
CVE-2024-47221
CheckUser in ScadaServerEngine/MainLogic.cs in Rapid SCADA through 5.8.4 allows an empty password...
CVE-2024-47221
CheckUser in ScadaServerEngine/MainLogic.cs in Rapid SCADA through 5.8.4 allows an empty password...
Rapid SCADA 安全漏洞
Rapid SCADA is a full-featured SCADA software from Rapid SCADA Open Source. A security vulnerability exists in Rapid SCADA version 5.8.4, which originates in the file ScadaServerEngine/MainLogic.cs where CheckUser allows the use of empty passwords...
