53 matches found
CVE-2021-33025 xArrow SCADA Path Traversal
xArrow SCADA versions 7.2 and prior permits unvalidated registry keys to be run with application-level privileges...
CVE-2021-33025 xArrow SCADA Path Traversal
xArrow SCADA versions 7.2 and prior permits unvalidated registry keys to be run with application-level privileges...
CVE-2021-33025
CVE-2021-33025 affects xArrow SCADA, versions 7.2 and prior. The vulnerability stems from unvalidated registry keys being able to run with application-level privileges (input validation/registry handling issue). Impact is reported as potential execution with higher privileges on affected systems;...
CVE-2021-33021 xArrow SCADA Cross-site Scripting
xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘edate’ of the resource xhisalarm.htm, which may allow an unauthorized attacker to execute arbitrary code...
CVE-2021-33021
CVE-2021-33021 affects xArrow SCADA — versions 7.2 and prior — with a cross-site scripting vulnerability in the web interface (parameter edate in xhisalarm.htm). Root cause: improper input handling during web page generation (CWE-79). Impact per sources: remote code execution risk; CVSS v3 base s...
CVE-2021-33021 xArrow SCADA Cross-site Scripting
xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘edate’ of the resource xhisalarm.htm, which may allow an unauthorized attacker to execute arbitrary code...
CVE-2021-33001 xArrow SCADA Cross-site Scripting
xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘bdate’ of the resource xhisvalue.htm, which may allow an unauthorized attacker to execute arbitrary code...
CVE-2021-33001 xArrow SCADA Cross-site Scripting
xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘bdate’ of the resource xhisvalue.htm, which may allow an unauthorized attacker to execute arbitrary code...
CVE-2021-33001
The CVE-2021-33001 entry affects xArrow SCADA, version 7.2 and prior, where cross-site scripting can occur via the bdate parameter in xhisvalue.htm. The incident is documented in multiple sources (NVD entry for CVE-2021-33001 and CISA ICS advisory ICSA-21-229-03) confirming affected product, vuln...
The vulnerability of HMI/SCADA systems like xArrow arises from the possibility of running them with unverified registry keys with application-level privileges. This allows attackers to bypass existing security restrictions and enhance their privileges.
The vulnerability of HMI/SCADA systems like xArrow stems from the ability to execute commands through unverified registry keys with application-level privileges. Exploiting this vulnerability allows attackers to bypass existing security restrictions and enhance their privileges...
The vulnerability of the “edate” parameter in the xhisalarm.htm component of the HMI/SCADA application xArrow allows attackers to perform cross-site scripting attacks.
The vulnerability of the “edate” parameter in the xhisalarm.htm component of the HMI/SCADA application xArrow is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the “bdate” parameter in the xhisvalue.htm component of the HMI/SCADA application xArrow allows attackers to perform cross-site scripting attacks.
The vulnerability of the “bdate” parameter in the xhisvalue.htm component of the HMI/SCADA application xArrow is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...
xArrow SCADA 跨站脚本漏洞
xArrow SCADA is an installer for industrial control products from xArrow in China. A cross-site scripting vulnerability exists in xArrow SCADA. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execut...
xArrow SCADA
1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: xArrow Equipment: xArrow SCADA Vulnerabilities: Cross-site Scripting, Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in remote code execution...
xArrow SCADA 输入验证错误漏洞
xArrow SCADA is an installer for industrial control products from xArrow in China. An input validation error vulnerability exists in xArrow SCADA version 7.2 and prior versions, which arises from allowing unauthenticated registry entries to run with application-level privileges...
xArrow SCADA 跨站脚本漏洞
xArrow SCADA is an installer for industrial control products from xArrow in China. A cross-site scripting vulnerability exists in xArrow SCADA. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execut...
xArrow <= 3.2 multiple vulnerabilities
Exploit for windows platform in category local exploits ------------- winerr.h ------------- / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004:...
xArrow Multiple Denial of Service Vulnerabilities
xArrow is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
