CVE-2024-22096

Summary of CVE-2024-22096 (Rapid SCADA) Rapid SCADA (Rapid Software LLC) versions prior to 5.8.4 are vulnerable to a path traversal issue. An attacker can append path traversal characters to the filename via a specific command, enabling reading of arbitrary files from the system. The issue is tie...

CVE-2024-21852 Rapid SCADA Path Traversal

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration file by utilizing a Zip Slip vulnerability in the unpacking routine to achieve remote code execution...

CVE-2024-21852 Rapid SCADA Path Traversal

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration file by utilizing a Zip Slip vulnerability in the unpacking routine to achieve remote code execution...

CVE-2024-21852

CVE-2024-21852 affects Rapid SCADA (Rapid Software LLC) prior to 5.8.4. A Zip Slip vulnerability in the unpacking routine lets an attacker supply a malicious configuration file to achieve remote code execution. The issue arises from improper restriction of pathnames during archive extraction, ena...

The vulnerability of the Event Handlers function in the multi-platform web solution for creating Scada systems, Scada-LTS, allows attackers to escalate privileges, execute arbitrary code, and obtain confidential information.

The vulnerability of Event Handlers in the multi-platform web solution for creating Scada systems is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to elevate privileges, execute arbitrary code, and obtain confidential information...

CVE-2023-33472

An issue was discovered in Scada-LTS v2.7.5.2 build 4551883606 and before, allows remote attackers with low-level authentication to escalate privileges, execute arbitrary code, and obtain sensitive information via Event Handlers function...

Authentication flaw

An issue was discovered in Scada-LTS v2.7.5.2 build 4551883606 and before, allows remote attackers with low-level authentication to escalate privileges, execute arbitrary code, and obtain sensitive information via Event Handlers function...

CVE-2023-33472

An issue was discovered in Scada-LTS v2.7.5.2 build 4551883606 and before, allows remote attackers with low-level authentication to escalate privileges, execute arbitrary code, and obtain sensitive information via Event Handlers function...

CVE-2023-33472

Consolidated details from connected sources confirm a vulnerability in Scada-LTS with versions 2.7.5.2 build 4551883606 and earlier. The root cause is insufficient access control in the Event Handlers function of the Scada-LTS web solution, enabling remote attackers with low-level authentication ...

Scada-LTS Security Vulnerability

Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A security vulnerability exists in Scada-LTS v2.7.5.2 and earlier versions that originated from allowing a remote attacker with low-level authentication to escalate privileges, execute arbitrary code, and...

CVE-2023-33472

An issue was discovered in Scada-LTS v2.7.5.2 build 4551883606 and before, allows remote attackers with low-level authentication to escalate privileges, execute arbitrary code, and obtain sensitive information via Event Handlers function...

CVE-2023-33472

An issue was discovered in Scada-LTS v2.7.5.2 build 4551883606 and before, allows remote attackers with low-level authentication to escalate privileges, execute arbitrary code, and obtain sensitive information via Event Handlers function...

Rapid Software Rapid SCADA Security Vulnerability

Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. A security vulnerability exists in Rapid Software Rapid SCADA version 5.8.4 and prior versions, which stems from a vulnerability that allows an attacker to generate an error message containing sensiti...

Rapid Software Rapid SCADA Path Traversal Vulnerability

Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. A security vulnerability exists in Rapid Software Rapid SCADA version 5.8.4 and earlier, which stems from the presence of a path traversal vulnerability. An attacker can exploit this vulnerability to...

Rapid Software Rapid SCADA Trust Management Issue Vulnerability

Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. Rapid Software Rapid SCADA 5.8.4 and prior versions have a trust management issue vulnerability that stems from the use of hard-coded credentials, which allows an attacker to connect to a specific por...

Rapid Software Rapid SCADA Input Validation Error Vulnerability

Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. An input validation error vulnerability exists in Rapid Software Rapid SCADA version 5.8.4 and prior versions, which originates from a vulnerability that allows an attacker to redirect a user to a...

Rapid Software Rapid SCADA Security Vulnerability

Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. A security vulnerability exists in Rapid Software Rapid SCADA 5.8.4 and earlier versions that stems from storing plaintext credentials in a different location, which allows an attacker with local acce...

Rapid Software Rapid SCADA Security Vulnerability

Rapid Software Rapid SCADA is an open source industrial automation platform from Rapid Software. A security vulnerability exists in Rapid Software Rapid SCADA 5.8.4 and earlier versions that stems from a misconfiguration of permissions, which allows any authenticated user on the server to write...

Rapid Software LLC Rapid SCADA

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely, low attack complexity Vendor: Rapid Software LLC Equipment: Rapid SCADA Vulnerabilities: Path Traversal, Relative Path Traversal, Local Privilege Escalation through Incorrect Permission Assignment for Critical Resource,...

PT-2024-1447 · Unknown · Rapid Scada

Name of the Vulnerable Software and Affected Versions: Rapid SCADA versions prior to 5.8.4 Description: The issue is related to the storage of passwords in plaintext. This may allow an attacker with local access to obtain unauthorized access to protected information. Recommendations: For versions...