The vulnerability of the InPlant SCADA system, related to insufficient calculation of password hashes, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the InPlant SCADA system is related to insufficient calculation of password hashes during the loading of project files. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the InPlant SCADA system, related to deficiencies in authentication procedures, allows attackers to increase their privileges.

The vulnerability of the InPlant SCADA system is related to deficiencies in the authentication process when loading project files. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the client-server data processing and technological operations control application Proficy HMI/SCADA CIMPLICITY stems from issues with process management. This vulnerability allows attackers to escalate their privileges.

The vulnerability of the client-server data processing and technical operations control application Proficy HMI/SCADA CIMPLICITY exists due to a process management issue. Exploiting this vulnerability can allow attackers to increase their privileges within the system...

CVE-2023-4986

A vulnerability classified as problematic was found in Supcon InPlant SCADA up to 20230901. Affected by this vulnerability is an unknown functionality of the file Project.xml. The manipulation leads to password hash with insufficient computational effort. Local access is required to approach this...

CVE-2023-4986

A vulnerability classified as problematic was found in Supcon InPlant SCADA up to 20230901. Affected by this vulnerability is an unknown functionality of the file Project.xml. The manipulation leads to password hash with insufficient computational effort. Local access is required to approach this...

CVE-2023-4985

A vulnerability classified as critical has been found in Supcon InPlant SCADA up to 20230901. Affected is an unknown function of the file Project.xml. The manipulation leads to improper authentication. An attack has to be approached locally. The exploit has been disclosed to the public and may be...

Authentication flaw

A vulnerability classified as critical has been found in Supcon InPlant SCADA up to 20230901. Affected is an unknown function of the file Project.xml. The manipulation leads to improper authentication. An attack has to be approached locally. The exploit has been disclosed to the public and may be...

Design/Logic Flaw

A vulnerability classified as problematic was found in Supcon InPlant SCADA up to 20230901. Affected by this vulnerability is an unknown functionality of the file Project.xml. The manipulation leads to password hash with insufficient computational effort. Local access is required to approach this...

CVE-2023-4986 Supcon InPlant SCADA Project.xml unknown vulnerability

A vulnerability classified as problematic was found in Supcon InPlant SCADA up to 20230901. Affected by this vulnerability is an unknown functionality of the file Project.xml. The manipulation leads to password hash with insufficient computational effort. Local access is required to approach this...

CVE-2023-4986 Supcon InPlant SCADA Project.xml unknown vulnerability

A vulnerability classified as problematic was found in Supcon InPlant SCADA up to 20230901. Affected by this vulnerability is an unknown functionality of the file Project.xml. The manipulation leads to password hash with insufficient computational effort. Local access is required to approach this...

CVE-2023-4986

CVE-2023-4986 affects Supcon InPlant SCADA up to 20230901. The vulnerability stems from an unknown function in Project.xml that results in under-computed password hashes. Exploitation requires local access and has high attack complexity, with disclosure already public. Multiple sources (NVD, Red ...

CVE-2023-4985

CVE-2023-4985 affects Supcon InPlant SCADA up to 20230901. The issue stems from an unknown function in Project.xml that enables improper authentication. It requires local access to exploit, and public disclosure of exploits is noted. Several sources (NVD/Red Hat/CVE listings) corroborate the loca...

CVE-2023-4985 Supcon InPlant SCADA Project.xml improper authentication

A vulnerability classified as critical has been found in Supcon InPlant SCADA up to 20230901. Affected is an unknown function of the file Project.xml. The manipulation leads to improper authentication. An attack has to be approached locally. The exploit has been disclosed to the public and may be...

CVE-2023-4985 Supcon InPlant SCADA Project.xml improper authentication

A vulnerability classified as critical has been found in Supcon InPlant SCADA up to 20230901. Affected is an unknown function of the file Project.xml. The manipulation leads to improper authentication. An attack has to be approached locally. The exploit has been disclosed to the public and may be...

PT-2023-5276 · Supcon · Supcon Inplant Scada

Name of the Vulnerable Software and Affected Versions: Supcon InPlant SCADA up to 20230901 Description: A critical issue has been discovered related to improper authentication in the handling of project file loading. This could potentially allow an attacker to elevate their privileges. The issue ...

Siemens Spectrum Power 7 Local Elevation of Privilege Vulnerability

Spectrum Power 7 provides the essential components of SCADA, communications and data modeling for control and monitoring systems. Application suites can be added to optimize network and generation management in all areas of energy management. A local elevation of privilege vulnerability exists in...

Supcon InPlant SCADA Security Vulnerability

Supcon InPlant SCADA is a SCADA program from China Zhongguancun Technology Supcon. A security vulnerability exists in Supcon InPlant SCADA that stems from the presence of an unknown function in Project.xml that results in an under-computed password hash...

The vulnerability of the microprogrammed software of the ABB AC700F and AC900F controllers, as well as the ABB Freelance SCADA system, arises from the comparison of numerical ranges without any necessary checks during request processing. This allows a intruder to cause the controller to stop working.

The vulnerability of the microprogrammed software of the ABB AC700F and AC900F controllers, as well as the ABB Freelance SCADA system, lies in the comparison of numerical ranges without any minimal checks during request processing. Exploiting this vulnerability could allow a malicious actor,...

The vulnerability of the IGSSupdateservice.exe executable of the interactive graphical SCADA system, which allows a intruder to execute arbitrary code.

The vulnerability of the IGSSupdateservice.exe executable of the Interactive Graphical SCADA System IGSS update service is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to execute arbitrary code by loading the malicious update file...

CVE-2023-4485

ARDEREG ​Sistema SCADA Central versions 2.203 and prior login page are vulnerable to an unauthenticated blind SQL injection attack. An attacker could manipulate the application's SQL query logic to extract sensitive information or perform unauthorized actions within the database. In this case, th...