Cross site scripting

A Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26. A cross-site scripting vulnerability may allow JavaScript code supplied by the attacker to execute within the user's browser...

Information disclosure

An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. These files may contain sensitive configuration information...

CVE-2017-6045

An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. These files may contain sensitive configuration information...

Input validation

A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26. The client does not properly validate the input or limit the amount of resources that are utilized by an attacker, which can be used to consume more resources than are available...

CVE-2017-6053

A Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26. A cross-site scripting vulnerability may allow JavaScript code supplied by the attacker to execute within the user's browser...

CVE-2017-6045

An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. These files may contain sensitive configuration information...

CVE-2017-6043

A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26. The client does not properly validate the input or limit the amount of resources that are utilized by an attacker, which can be used to consume more resources than are available...

CVE-2017-6043

A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26. The client does not properly validate the input or limit the amount of resources that are utilized by an attacker, which can be used to consume more resources than are available...

CVE-2017-6045

An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. These files may contain sensitive configuration information...

CVE-2017-6053

The CVE-2017-6053 entry describes a Cross-Site Scripting vulnerability in Trihedral VTScada prior to version 11.2.26, affecting the web interface and allowing attacker-supplied JavaScript to execute in a user’s browser. The connected OpenVAS/ICS references corroborate VTScada as the affected prod...

CVE-2017-6043

CVE-2017-6043 affects Trihedral VTScada before version 11.2.26. The vulnerability arises from insufficient input validation and resource-limiting in the VTScada client, enabling uncontrolled resource consumption (denial of service) with a CVSS v3 base score of 7.5 (network vector, no user interac...

CVE-2017-6053

A Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26. A cross-site scripting vulnerability may allow JavaScript code supplied by the attacker to execute within the user's browser...

CVE-2017-6045

Summary: CVE-2017-6045 is an information disclosure vulnerability in Trihedral VTScada prior to version 11.2.26. The issue arises from files being exposed within the web server to unauthenticated users, potentially revealing sensitive configuration data. Affected product/version: VTScada before 1...

Trihedral VTScada Cross-Site Scripting Vulnerability

Trihedral VTScada formerly known as VTS is a SCADA system from Trihedral Engineering, Canada, based on a Windows platform with a Web interface option. A cross-site scripting vulnerability exists in Trihedral VTScada versions prior to 11.2.26. A remote attacker could exploit this vulnerability to...

Trihedral VTScada Denial of Service Vulnerability

Trihedral VTScada formerly known as VTS is a SCADA system from Trihedral Engineering, Canada, based on a Windows platform with a Web interface option. A denial of service vulnerability exists in versions of Trihedral VTScada prior to 11.2.26, which arises from the program failing to validate inpu...

PT-2017-16865

Name of the Vulnerable Software and Affected Versions Trihedral VTScada versions prior to 11.2.26 Description A Cross-Site Scripting issue may allow JavaScript code supplied by the attacker to execute within the user's browser. Recommendations For versions prior to 11.2.26, update to version...

PT-2017-16857

Name of the Vulnerable Software and Affected Versions Trihedral VTScada versions prior to 11.2.26 Description A Resource Consumption issue was discovered. The client does not properly validate the input or limit the amount of resources that are utilized by an attacker, which can be used to consum...

Trihedral VTScada Information Disclosure Vulnerability

Trihedral VTScada formerly known as VTS is a SCADA system from Trihedral Engineering, Canada, based on a Windows platform with a Web interface option. An information disclosure vulnerability exists in Trihedral VTScada versions prior to 11.2.26. An attacker could exploit this vulnerability to...

PT-2017-16859

Name of the Vulnerable Software and Affected Versions Trihedral VTScada versions prior to 11.2.26 Description An Information Exposure issue was discovered, where some files are exposed within the web server application to unauthenticated users, potentially containing sensitive configuration...

CVE-2017-6045: Exposure of Information Through Directory Listing

An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. These files may contain sensitive configuration information...