CVE-2024-21764

CVE-2024-21764 affects Rapid SCADA, specifically versions prior to 5.8.4. The issue is caused by the use of hard-coded credentials, which may allow a remote attacker to connect to a specific port and, according to the PT-2024-1449 entry, could enable full control of the system. Remediation guidan...

CVE-2024-21852

CVE-2024-21852 affects Rapid SCADA (Rapid Software LLC) prior to 5.8.4. A Zip Slip vulnerability in the unpacking routine lets an attacker supply a malicious configuration file to achieve remote code execution. The issue arises from improper restriction of pathnames during archive extraction, ena...

CVE-2024-22016

Rapid SCADA (Rapid Software LLC) before version 5.8.4 is affected by CVE-2024-22016: an authenticated user can write directly to the Scada directory due to incorrect permission assignment for a critical resource, enabling local privilege escalation. Affected versions: prior to 5.8.4. Impact: pote...

CVE-2024-22096

Summary of CVE-2024-22096 (Rapid SCADA) Rapid SCADA (Rapid Software LLC) versions prior to 5.8.4 are vulnerable to a path traversal issue. An attacker can append path traversal characters to the filename via a specific command, enabling reading of arbitrary files from the system. The issue is tie...

CVE-2024-21794

CVE-2024-21794 affects Rapid SCADA before version 5.8.4. The issue is an open redirect on the login page caused by improper data handling, allowing an attacker to redirect users to malicious pages. Affected product: Rapid SCADA (Rapid Software LLC). Root cause: open redirection via login page. Im...

CVE-2024-21869

Affected product: Rapid SCADA (Rapid Software LLC). Vulnerable component: plaintext storage of credentials in Rapid SCADA versions prior to 5.8.4. Root cause: credentials stored in plaintext in various locations, enabling disclosure with local access. Impact: confidentiality of credentials can be...

CVE-2022-44153

Affected product: Rapid SCADA 5.8.4. Vulnerability: Cross Site Scripting (XSS) in Rapid SCADA 5.8.4 (CVE-2022-44153). The connected sources confirm the issue exists in this version and describe an XSS vulnerability but do not provide exploit details or root-cause specifics. CVSS v3.1 metrics indi...

CVE-2024-47221

Rapid SCADA vulnerability CVE-2024-47221 affects Rapid SCADA versions up to 5.8.4, where CheckUser in ScadaServerEngine/MainLogic.cs permits an empty password. This can enable authentication with no credentials, potentially allowing unauthorized access. The CVSS 3.1 vector indicates Network attac...

CVE-2018-5313

CVE-2018-5313 describes a local privilege-escalation vulnerability in Rapid Scada 5.5.0 caused by weak access control set during installation (weak permissions on the installation directory, e.g., C:\SCADA). A local attacker can exploit this to execute arbitrary code with elevated rights (Adminis...

CVE-2024-21866

Summary of CVE-2024-21866 : Rapid SCADA versions prior to 5.8.4 expose sensitive data in error messages when receiving a malformed request. This is a server-side error disclosure issue in Rapid Software LLC’s Rapid SCADA, enabling an attacker to obtain sensitive information via a specially crafte...

CVE-2020-22722

CVE-2020-22722 affects Rapid SCADA 5.8.0. A local privilege escalation affects the ScadaAgentSvc.exe binary: an attacker can place a malicious .exe in the application and rename it to ScadaAgentSvc.exe, causing the service to execute as NT AUTHORITY\SYSTEM and grant full system access. Attacks de...