Lucene search
+L

133 matches found

BDU FSTEC
BDU FSTEC
added 2022/08/24 12:00 a.m.13 views

The vulnerability of the ActiveX control on the SCADA server of Measuresoft ScadaPro Server allows a intruder to execute arbitrary code.

The vulnerability of the ActiveX control in the SCADA server of Measuresoft ScadaPro Server relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the target system using a specially crafted file...

7.8CVSS7.8AI score0.00308EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2022/08/23 12:00 a.m.13 views

Measuresoft ScadaPro Server and Client 后置链接漏洞

Measuresoft ScadaPro Server and Client is a powerful real-time data acquisition software package from Measuresoft Ireland. It provides monitoring, data logging, simulation development and report generation. Measuresoft ScadaPro Server and Client suffers from a backlink vulnerability that stems fr...

7.8CVSS5.5AI score0.00297EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2022/08/23 12:00 a.m.27 views

Measuresoft ScadaPro Client Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Measuresoft ScadaPro Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS5.3AI score0.00297EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/08/23 12:00 a.m.25 views

Measuresoft ScadaPro Server ORM File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Measuresoft ScadaPro Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS3.9AI score0.00301EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/08/23 12:00 a.m.30 views

Measuresoft ScadaPro Server ORM File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Measuresoft ScadaPro Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS3.9AI score0.00301EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/08/23 12:00 a.m.33 views

Measuresoft ScadaPro Server ORM File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Measuresoft ScadaPro Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS3.8AI score0.00323EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/08/23 12:00 a.m.22 views

Measuresoft ScadaPro Server Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Measuresoft ScadaPro Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.8CVSS5.4AI score0.00297EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/08/23 12:00 a.m.32 views

Measuresoft ScadaPro Server ORM File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Measuresoft ScadaPro Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS3.9AI score0.00301EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/08/23 12:00 a.m.30 views

Measuresoft ScadaPro Server Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Measuresoft ScadaPro Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exist...

6.1CVSS3.5AI score0.0023EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/08/23 12:00 a.m.20 views

PT-2022-4634 · Measuresoft · Measuresoft Scadapro Server

Name of the Vulnerable Software and Affected Versions: Measuresoft ScadaPro Server All Versions Description: The issue is related to the use of unmaintained ActiveX controls in Measuresoft ScadaPro Server, which may lead to two stack-based buffer overflow instances when processing a specific...

7.8CVSS8AI score0.00307EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2022/08/23 12:00 a.m.12 views

PT-2022-4633 · Measuresoft · Measuresoft Scadapro Server

Name of the Vulnerable Software and Affected Versions: Measuresoft ScadaPro Server All Versions Description: The issue is related to the use of unmaintained ActiveX controls in Measuresoft ScadaPro Server, which may allow untrusted pointer deference instances while processing a specific project...

7.8CVSS7.8AI score0.00301EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2022/08/23 12:00 a.m.11 views

Measuresoft ScadaPro Server and Client 后置链接漏洞

Measuresoft ScadaPro Server and Client is a powerful real-time data acquisition software package from Measuresoft Ireland. It provides monitoring, data logging, simulation development and report generation. Measuresoft ScadaPro Server and Client suffers from a backlink vulnerability that stems fr...

6.1CVSS5.5AI score0.0023EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/08/23 12:00 a.m.13 views

PT-2022-4637 · Measuresoft · Measuresoft Scadapro Server +1

Name of the Vulnerable Software and Affected Versions: Measuresoft ScadaPro Server and Client All Versions Description: The issue is related to the incorrect resolution of links before file access in the Measuresoft ScadaPro Server and Client. This could potentially allow a remote attacker to...

7.2CVSS5.4AI score0.0023EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2022/08/23 12:00 a.m.18 views

PT-2022-4636 · Measuresoft · Measuresoft Scadapro Server +1

Name of the Vulnerable Software and Affected Versions: Measuresoft ScadaPro Server and Client All Versions Description: The issue is related to the improper resolution of links before file access, which could allow privilege escalation. This could potentially be exploited by a remote attacker to...

7.8CVSS7.3AI score0.00297EPSS
SaveExploits0References11
ICS
ICS
added 2022/08/23 12:00 a.m.205 views

Measuresoft ScadaPro Server

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Measuresoft Equipment: ScadaPro Server Vulnerability: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability may allow arbitrary code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The...

7.8CVSS7.8AI score0.00308EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/08/23 12:00 a.m.10 views

Measuresoft ScadaPro Server and Client 缓冲区错误漏洞

Measuresoft ScadaPro Server and Client is a powerful real-time data acquisition software package from Measuresoft Ireland. It provides monitoring, data logging, simulation development and report generation. A buffer error vulnerability exists in Measuresoft ScadaPro Server and Client versions pri...

7.8CVSS5.8AI score0.00308EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/08/23 12:00 a.m.11 views

Measuresoft ScadaPro Server and Client 资源管理错误漏洞

Measuresoft ScadaPro Server and Client is a powerful real-time data acquisition software package from Measuresoft Ireland. It provides monitoring, data logging, simulation development and report generation. A resource management error vulnerability exists in Measuresoft ScadaPro Server and Client...

7.8CVSS5.5AI score0.00323EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2022/08/23 12:00 a.m.29 views

Measuresoft ScadaPro Server ORM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Measuresoft ScadaPro Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.3AI score0.00307EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/08/23 12:00 a.m.25 views

Measuresoft ScadaPro Server ORM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Measuresoft ScadaPro Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4AI score0.00308EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/08/23 12:00 a.m.26 views

Measuresoft ScadaPro Server ORM File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Measuresoft ScadaPro Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS3.9AI score0.00301EPSS
SaveExploits0References1
Rows per page
Query Builder