CVE-2016-4510

The WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files via unspecified vectors...

Out-of-bounds

The WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service out-of-bounds read and application crash via unspecified vectors...

Authentication flaw

The WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in the WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to read arbitrary files via a crafted pathname...

CVE-2016-4523

The WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service out-of-bounds read and application crash via unspecified vectors...

CVE-2016-4510

Trihedral VTScada (VTScada/VTS) WAP interface (versions 8.x–before 11.2.02) allows remote authentication bypass and arbitrary-file read via unspecified vectors. CVE-2016-4510 is rated CVSS v3.0 COVID 9.1 (CRITICAL) with network access and low attack complexity. Availability of public exploits is ...

CVE-2016-4523

CVE-2016-4523 affects Trihedral VTScada (VTS) WAP interface on Windows, with VTScada versions 8.x through 11.x prior to 11.2.02. The vulnerability allows remote attackers to cause a denial of service via an out-of-bounds read that crashes the application. Public disclosures and mitigations descri...

CVE-2016-4523

The WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service out-of-bounds read and application crash via unspecified vectors...

CVE-2016-4532

The CVE covers Trihedral VTScada (WAP interface) directory-traversal vulnerability affecting VTScada/VTS 8.x through 11.2.02. A crafted pathname enables remote attackers to read arbitrary files due to improper path restrictions and, per ZDI, authentication may be bypassed. Impact: sensitive file ...

CVE-2016-4532

Directory traversal vulnerability in the WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to read arbitrary files via a crafted pathname...

CVE-2016-4523

The WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service out-of-bounds read and application crash via unspecified vectors. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker...

Trihedral Engineering Limited VTScada Vulnerabilities

OVERVIEW An anonymous researcher has identified several vulnerabilities in Trihedral Engineering Ltd.’s Trihedral VTScada and reported them to Zero Day Initiative ZDI, which reported them to NCCIC/ICS-CERT. Trihedral Engineering Ltd. has produced a new version to mitigate these vulnerabilities...

Trihedral VTScada 6.5.x < 9.1.20 / 10.x < 10.2.22 / 11.x < 11.1.09 HTTP Server DoS

Binary data scadatrihedralvtscada11109.nbin...

Trihedral VTScada Detection

Binary data scadaapptrihedralvtscadadetect.nbin...

Network Time Protocol Vulnerabilities (Supplement Update A)

OVERVIEW --------- Begin Update A Part 1 of 2 -------- This advisory supplement is to accompany the NCCIC/ICS-CERT advisory titled ICSA-14-353-01C Network Time Protocol Vulnerabilities that was published February 5, 2015, on the ICS‑CERT web site. --------- End Update A Part 1 of 2 ----------...

Trihedral VTScada Server Detection

Binary data 8578.prm...

Trihedral VTScada 6.5 through 9.x <= 9.1.19, 10.x <= 10.2.21, and 11.x <= 11.1.08 Remote Denial of Service

Binary data 8609.prm...

Trihedral VTScada Integer Overflow Denial of Service Vulnerability

This vulnerability allows remote attackers to cause a denial of service to vulnerable installations of Trihedral VTScada. Authentication is not required to exploit this vulnerability. The specific flaw exists within the included HTTP server. By providing a small negative content length, an attack...

Integer overflow

Integer overflow in Trihedral Engineering VTScada formerly VTS 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service server crash via a crafted request, which triggers a large memory allocation...

CVE-2014-9192 Trihedral Engineering Limited VTScada Integer Overflow

Integer overflow in Trihedral Engineering VTScada formerly VTS 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service server crash via a crafted request, which triggers a large memory allocation...