CVE-2016-4523

CVE-2016-4523 affects Trihedral VTScada (VTS) WAP interface on Windows, with VTScada versions 8.x through 11.x prior to 11.2.02. The vulnerability allows remote attackers to cause a denial of service via an out-of-bounds read that crashes the application. Public disclosures and mitigations descri...

CVE-2022-3181

Trihedral VTScada is affected by CVE-2022-3181 (CVE assignment tied to VTScada 12.0.38 and earlier). The vulnerability stems from improper input validation, where a specially malformed HTTP request could cause the VTScada server to crash, impacting both LAN-only and internet-facing deployments. T...

CVE-2016-4532

The CVE covers Trihedral VTScada (WAP interface) directory-traversal vulnerability affecting VTScada/VTS 8.x through 11.2.02. A crafted pathname enables remote attackers to read arbitrary files due to improper path restrictions and, per ZDI, authentication may be bypassed. Impact: sensitive file ...

CVE-2016-4510

Trihedral VTScada (VTScada/VTS) WAP interface (versions 8.x–before 11.2.02) allows remote authentication bypass and arbitrary-file read via unspecified vectors. CVE-2016-4510 is rated CVSS v3.0 COVID 9.1 (CRITICAL) with network access and low attack complexity. Availability of public exploits is ...

CVE-2017-14029

CVE-2017-14029 affects Trihedral VTScada 11.3.03 and earlier, describing an Uncontrolled Search Path Element vulnerability that lets an attacker cause the program to execute a specially crafted malicious DLL placed on the target machine. The issue is local (AV:L) with user interaction required (U...

CVE-2017-14031

** VTScada 11.3.03 and earlier** suffer from an Improper Access Control (CWE-284) vulnerability that lets a local, non-administrative user read and write to the target machine’s file system. The issue is documented in ICS-CERT as CVE-2017-14031 and is described as a local vulnerability with high ...

CVE-2017-6053

The CVE-2017-6053 entry describes a Cross-Site Scripting vulnerability in Trihedral VTScada prior to version 11.2.26, affecting the web interface and allowing attacker-supplied JavaScript to execute in a user’s browser. The connected OpenVAS/ICS references corroborate VTScada as the affected prod...

CVE-2017-6043

CVE-2017-6043 affects Trihedral VTScada before version 11.2.26. The vulnerability arises from insufficient input validation and resource-limiting in the VTScada client, enabling uncontrolled resource consumption (denial of service) with a CVSS v3 base score of 7.5 (network vector, no user interac...

CVE-2017-6045

Summary: CVE-2017-6045 is an information disclosure vulnerability in Trihedral VTScada prior to version 11.2.26. The issue arises from files being exposed within the web server to unauthenticated users, potentially revealing sensitive configuration data. Affected product/version: VTScada before 1...

CVE-2014-9192

CVE-2014-9192 is a concrete integer-overflow vulnerability in Trihedral VTScada (formerly VTS) HTTP server. The flaw allows remote attackers to trigger an enormous memory allocation by sending crafted requests (notably with problematic Content-Length handling), causing the VTScada server to crash...