CVE-2022-2897

CVE-2022-2897 affects Measuresoft ScadaPro Server and Client (all versions). The issue is improper link resolution before file access (link following) that can lead to local privilege escalation. Public sources describe a local attack requiring initial code execution by a low-privileged user, wit...

CVE-2022-2898

CVE-2022-2898 affects Measuresoft ScadaPro Server and Client (All Versions). The issue is improper link resolution before file access (Link Following), leading to a Denial-of-Service condition. Exploitation in public advisories indicates a local attacker with low privileges may abuse the ScadaPro...

CVE-2012-1824

CVE-2012-1824 affects Measuresoft ScadaPro Server and Client prior to version 4.0.0. The vulnerability is an Untrusted Search Path (DLL hijack) that lets a local attacker place a Trojan horse DLL in the current working directory to gain privileges. OpenVAS/Red Hat/NVD entries confirm a code execu...