Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

measuresoft scadapro vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-3490
Multiple stack-based buffer overflows in service.exe in Measuresoft ScadaPro 4.0.0 and previous versions allow remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a long command to port 11234, as demonstrated with the TF command.
Measuresoft ScadaproMeasuresoft Scadapro 2.4.3Measuresoft Scadapro 2.4.4Measuresoft Scadapro 2.5.4Measuresoft Scadapro 2.5.5Measuresoft Scadapro 2.6.0Measuresoft Scadapro 3.3.0Measuresoft Scadapro 3.3.1Measuresoft Scadapro 3.9.3Measuresoft Scadapro 3.9.4Measuresoft Scadapro 3.9.12Measuresoft Scadapro 3.9.13Measuresoft Scadapro 2.4.1Measuresoft Scadapro 2.4.2Measuresoft Scadapro 2.5.2Measuresoft Scadapro 2.5.3Measuresoft Scadapro 2.9.0Measuresoft Scadapro 3.1.0Measuresoft Scadapro 3.9.1Measuresoft Scadapro 3.9.2Measuresoft Scadapro 3.9.9Measuresoft Scadapro 3.9.10
NA
CVE-2011-3495
Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and previous versions allow remote malicious users to read, modify, or delete arbitrary files via the (1) RF, (2) wF, (3) UF, or (4) NF command.
Measuresoft ScadaproMeasuresoft Scadapro 2.4.3Measuresoft Scadapro 2.4.4Measuresoft Scadapro 2.5.5Measuresoft Scadapro 2.6.0Measuresoft Scadapro 3.3.0Measuresoft Scadapro 3.3.1Measuresoft Scadapro 3.9.3Measuresoft Scadapro 3.9.4Measuresoft Scadapro 3.9.12Measuresoft Scadapro 3.9.13Measuresoft Scadapro 2.4.1Measuresoft Scadapro 2.4.2Measuresoft Scadapro 2.5.3Measuresoft Scadapro 2.5.4Measuresoft Scadapro 2.9.0Measuresoft Scadapro 3.1.0Measuresoft Scadapro 3.9.1Measuresoft Scadapro 3.9.2Measuresoft Scadapro 3.9.10Measuresoft Scadapro 3.9.11Measuresoft Scadapro 2.1
NA
CVE-2011-3496
service.exe in Measuresoft ScadaPro 4.0.0 and previous versions allows remote malicious users to execute arbitrary commands via shell metacharacters in the (1) BF, (2) OF, or (3) EF command.
Measuresoft Scadapro 2.3Measuresoft Scadapro 2.4Measuresoft Scadapro 2.5Measuresoft Scadapro 2.5.1Measuresoft Scadapro 2.1Measuresoft Scadapro 2.2Measuresoft Scadapro 2.4.5Measuresoft Scadapro 2.4.6Measuresoft Scadapro 2.7.0Measuresoft Scadapro 2.7.1Measuresoft Scadapro 3.2.8Measuresoft Scadapro 3.2.9Measuresoft Scadapro 3.9.5Measuresoft Scadapro 3.9.6Measuresoft Scadapro 3.9.14Measuresoft Scadapro 3.9.15Measuresoft Scadapro 2.4.1Measuresoft Scadapro 2.4.2Measuresoft Scadapro 2.5.2Measuresoft Scadapro 2.5.3Measuresoft Scadapro 2.5.4Measuresoft Scadapro 2.9.0
NA
CVE-2011-3497
service.exe in Measuresoft ScadaPro 4.0.0 and previous versions allows remote malicious users to execute arbitrary DLL functions via the XF function, possibly related to an insecure exposed method.
Measuresoft Scadapro 2.4.1Measuresoft Scadapro 2.4.2Measuresoft Scadapro 2.5.2Measuresoft Scadapro 2.5.3Measuresoft Scadapro 2.5.4Measuresoft Scadapro 2.9.0Measuresoft Scadapro 3.1.0Measuresoft Scadapro 3.9.1Measuresoft Scadapro 3.9.2Measuresoft Scadapro 3.9.9Measuresoft Scadapro 3.9.10Measuresoft Scadapro 3.9.11Measuresoft Scadapro 2.1Measuresoft Scadapro 2.2Measuresoft Scadapro 2.4.5Measuresoft Scadapro 2.4.6Measuresoft Scadapro 2.7.0Measuresoft Scadapro 2.7.1Measuresoft Scadapro 3.2.8Measuresoft Scadapro 3.2.9Measuresoft Scadapro 3.9.5Measuresoft Scadapro 3.9.6
NA
CVE-2012-1824
Untrusted search path vulnerability in Measuresoft ScadaPro Client prior to 4.0.0 and ScadaPro Server prior to 4.0.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Measuresoft Scadapro ServerMeasuresoft Scadapro Client
5.5
CVSSv3
CVE-2022-2898
Measuresoft ScadaPro Server and Client (All Versions) do not properly resolve links before file access; this could allow a denial-of-service condition.
Measuresoft Scadapro ServerMeasuresoft Scadapro Client
7.8
CVSSv3
CVE-2022-2897
Measuresoft ScadaPro Server and Client (All Versions) do not properly resolve links before file access; this could allow privilege escalation..
Measuresoft Scadapro ServerMeasuresoft Scadapro Client
7.8
CVSSv3
CVE-2022-2892
Measuresoft ScadaPro Server (Versions before 6.8.0.1) uses an unmaintained ActiveX control, which may allow an out-of-bounds write condition while processing a specific project file.
Measuresoft Scadapro Server
7.8
CVSSv3
CVE-2022-2894
Measuresoft ScadaPro Server (All Versions) uses unmaintained ActiveX controls. The controls may allow seven untrusted pointer deference instances while processing a specific project file.
Measuresoft Scadapro Server
7.8
CVSSv3
CVE-2022-2896
Measuresoft ScadaPro Server (All Versions) allows use after free while processing a specific project file.
Measuresoft Scadapro Server
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-29895injectCVE-2023-52689CVE-2024-5049CVE-2024-5051privilege escalationphysicalCVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook