3460 matches found
CVE-2024-47221
Rapid SCADA vulnerability CVE-2024-47221 affects Rapid SCADA versions up to 5.8.4, where CheckUser in ScadaServerEngine/MainLogic.cs permits an empty password. This can enable authentication with no credentials, potentially allowing unauthorized access. The CVSS 3.1 vector indicates Network attac...
CVE-2024-47221
CheckUser in ScadaServerEngine/MainLogic.cs in Rapid SCADA through 5.8.4 allows an empty password...
Siemens SIMATIC SCADA and PCS 7 systems Remote Code Execution Vulnerability
SIMATIC Information Server is used to report and visualize process data stored in SIMATIC process Historian, the SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC PCS-neo long-term archiving system. It stores process values, alarms, and batch data from the production plant in its database and provides...
CVE-2024-8232
SpiderControl SCADA Web Server has a vulnerability that could allow an attacker to upload specially crafted malicious files without authentication...
CVE-2024-8232
CVE-2024-8232 affects SpiderControl SCADA Web Server (iniNet Solutions GmbH). The vulnerability allows unauthenticated upload of specially crafted files via the web server, with potential to log in or execute arbitrary code. Affected products in ICS advisories include SpiderControl SCADA Web Serv...
CVE-2024-8232 iniNet Solutions SpiderControl SCADA Web Server Unrestricted Upload of File with Dangerous Type
SpiderControl SCADA Web Server has a vulnerability that could allow an attacker to upload specially crafted malicious files without authentication...
CVE-2024-8232 iniNet Solutions SpiderControl SCADA Web Server Unrestricted Upload of File with Dangerous Type
SpiderControl SCADA Web Server has a vulnerability that could allow an attacker to upload specially crafted malicious files without authentication...
iniNet Solutions SpiderControl SCADA Web Server
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity Vendor : iniNet Solutions GmbH Equipment : SpiderControl SCADA Web Server Vulnerabilities : Unrestricted Upload of File with Dangerous Type 2. RISK EVALUATION Successful exploitation of this...
Siemens SIMATIC SCADA and PCS 7 Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
PT-2024-8122 · Unknown · Power Scada Operation +2
Name of the Vulnerable Software and Affected Versions: Power Monitoring Expert, Power Operation, Power SCADA Operation affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting XSS. This...
7-Technologies IGSS 9 IGSSdataServer.exe Denial Of Service
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule '7-Technologies IGSS 9 IGSSdataServer.exe DoS', 'Description' = %q The 7-Technologies SCADA IGSS Data Server IGSSdataServer.exe 'jfa', Metasploit...
Beckhoff TwinCAT SCADA PLC 2.11.0.2004 Denial Of Service
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Beckhoff TwinCAT SCADA PLC 2.11.0.2004 DoS', 'Description' = %q The Beckhoff TwinCAT version 'Luigi Auriemma', Public exploit 'jfa', Metasploit...
CVE-2024-7901
A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Scada-LTS/app.shtm/alarms/Scada of the component Message Handler. The manipulation leads to cross site scripting. The attack can be launched...
CVE-2024-7901 Scada-LTS Message Scada cross site scripting
A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Scada-LTS/app.shtm/alarms/Scada of the component Message Handler. The manipulation leads to cross site scripting. The attack can be launched...
CVE-2024-7901 Scada-LTS Message Scada cross site scripting
A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Scada-LTS/app.shtm/alarms/Scada of the component Message Handler. The manipulation leads to cross site scripting. The attack can be launched...
CVE-2024-7901 Scada-LTS Message Scada cross site scripting
A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Scada-LTS/app.shtm/alarms/Scada of the component Message Handler. The manipulation leads to cross site scripting. The attack can be launched...
CVE-2024-7901
CVE-2024-7901 affects Scada-LTS 2.7.8, specifically the Message Handler component. The vulnerability stems from an unknown functionality in the file /Scada-LTS/app.shtm#/alarms/Scada, enabling remote cross-site scripting. The exploit has been publicly disclosed. Remediation: a fix is planned for ...
Scada-LTS 跨站脚本漏洞
Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A cross-site scripting vulnerability exists in Scada-LTS version 2.7.8, which stems from unknown functionality in the file /Scada-LTS/app.shtm/alarms/Scada that results in cross-site scripting...
PT-2024-8682 · Scada-Lts · Scada-Lts
Name of the Vulnerable Software and Affected Versions: Scada-LTS version 2.7.8 Description: A vulnerability has been found in the Message Handler component of Scada-LTS, related to the file /Scada-LTS/app.shtm/alarms/Scada. The manipulation leads to cross-site scripting. The attack can be launche...
