CVE-2017-6043: Uncontrolled Resource Consumption

A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26. The client does not properly validate the input or limit the amount of resources that are utilized by an attacker, which can be used to consume more resources than are available...

CVE-2017-6053: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26. A cross-site scripting vulnerability may allow JavaScript code supplied by the attacker to execute within the user's browser...

Trihedral Engineering Limited VTScada

CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Trihedral Engineering Limited Equipment: VTScada Vulnerability: Resource Consumption, Cross-Site Scripting, Information Exposure AFFECTED PRODUCTS The following versions of VTScada, an HMI SCADA software, are affected...

Trihedral VTScada Path Out-Of-Bounds Indexing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trihedral VTScada. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of Wireless Application Protocol requests. The issue lies in the failur...

Trihedral VTScada Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Trihedral VTScada. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of Wireless Application Protocol requests. The issue lies in th...

Trihedral VTScada directory traversal vulnerability

No description provided by source...

Trihedral VTScada Authorization Issues Vulnerability

Trihedral VTScada formerly known as VTS is a SCADA system from Trihedral Engineering, Canada, based on a Windows platform with a Web interface option. An authorization issue vulnerability exists in the WAP interface of Trihedral VTScada version 8 and versions prior to 11.2.02. A remote attacker...

Trihedral VTScada Buffer Overflow Vulnerability

Trihedral VTScada formerly known as VTS is a SCADA system from Trihedral Engineering, Canada, based on a Windows platform with a Web interface option. A buffer overflow vulnerability exists in the WAP interface of Trihedral VTScada version 8 and versions prior to 11.2.02. A remote attacker could...

Trihedral VTScada Directory Traversal Vulnerability

Trihedral VTScada formerly known as VTS is a SCADA system from Trihedral Engineering, Canada, based on a Windows platform with a Web interface option. A directory traversal vulnerability exists in the WAP interface of Trihedral VTScada versions 8.x through 11.1.24. A remote attacker can exploit t...

CVE-2016-4532

Directory traversal vulnerability in the WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to read arbitrary files via a crafted pathname...

CVE-2016-4523

The WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service out-of-bounds read and application crash via unspecified vectors...

CVE-2016-4510

The WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files via unspecified vectors...

Authentication flaw

The WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in the WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to read arbitrary files via a crafted pathname...

Out-of-bounds

The WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service out-of-bounds read and application crash via unspecified vectors...

CVE-2016-4523

The WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service out-of-bounds read and application crash via unspecified vectors...

CVE-2016-4510

Trihedral VTScada (VTScada/VTS) WAP interface (versions 8.x–before 11.2.02) allows remote authentication bypass and arbitrary-file read via unspecified vectors. CVE-2016-4510 is rated CVSS v3.0 COVID 9.1 (CRITICAL) with network access and low attack complexity. Availability of public exploits is ...

CVE-2016-4532

Directory traversal vulnerability in the WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to read arbitrary files via a crafted pathname...

CVE-2016-4523

CVE-2016-4523 affects Trihedral VTScada (VTS) WAP interface on Windows, with VTScada versions 8.x through 11.x prior to 11.2.02. The vulnerability allows remote attackers to cause a denial of service via an out-of-bounds read that crashes the application. Public disclosures and mitigations descri...

CVE-2016-4532

The CVE covers Trihedral VTScada (WAP interface) directory-traversal vulnerability affecting VTScada/VTS 8.x through 11.2.02. A crafted pathname enables remote attackers to read arbitrary files due to improper path restrictions and, per ZDI, authentication may be bypassed. Impact: sensitive file ...