Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

scada vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2014-2342
Triangle MicroWorks SCADA Data Gateway prior to 3.00.0635 allows remote malicious users to cause a denial of service (excessive data processing) via a crafted DNP3 packet.
Trianglemicroworks Scada Data Gateway 2.54.0594Trianglemicroworks Scada Data Gateway 2.54.0592Trianglemicroworks Scada Data Gateway 2.54.0591Trianglemicroworks Scada Data Gateway 2.54.0590Trianglemicroworks Scada Data Gateway 2.54.0575Trianglemicroworks Scada Data Gateway 2.54.0574Trianglemicroworks Scada Data Gateway 2.54.0573Trianglemicroworks Scada Data Gateway 2.54.0572Trianglemicroworks Scada Data Gateway 2.54.0545Trianglemicroworks Scada Data Gateway 2.54.0544Trianglemicroworks Scada Data Gateway 2.54.0540Trianglemicroworks Scada Data Gateway 2.54.0536Trianglemicroworks Scada Data Gateway 3.00.0615Trianglemicroworks Scada Data Gateway 3.00.0612Trianglemicroworks Scada Data Gateway 2.54.0597Trianglemicroworks Scada Data Gateway 2.54.0595Trianglemicroworks Scada Data Gateway 2.54.0589Trianglemicroworks Scada Data Gateway 2.54.0587Trianglemicroworks Scada Data Gateway 2.54.0579Trianglemicroworks Scada Data Gateway 2.54.0577Trianglemicroworks Scada Data Gateway 2.54.0570Trianglemicroworks Scada Data Gateway 2.54.0567
2.1
CVSSv2
CVE-2014-2343
Triangle MicroWorks SCADA Data Gateway prior to 3.00.0635 allows physically proximate malicious users to cause a denial of service (excessive data processing) via a crafted DNP request over a serial line.
Trianglemicroworks Scada Data Gateway 2.54.0596Trianglemicroworks Scada Data Gateway 2.54.0595Trianglemicroworks Scada Data Gateway 2.54.0594Trianglemicroworks Scada Data Gateway 2.54.0592Trianglemicroworks Scada Data Gateway 2.54.0577Trianglemicroworks Scada Data Gateway 2.54.0576Trianglemicroworks Scada Data Gateway 2.54.0575Trianglemicroworks Scada Data Gateway 2.54.0574Trianglemicroworks Scada Data Gateway 2.54.0552Trianglemicroworks Scada Data Gateway 2.54.0545Trianglemicroworks Scada Data Gateway 2.54.0544Trianglemicroworks Scada Data Gateway 2.54.0540Trianglemicroworks Scada Data Gateway 3.00.0630Trianglemicroworks Scada Data Gateway 3.00.0616Trianglemicroworks Scada Data Gateway 3.00.0615Trianglemicroworks Scada Data Gateway 3.00.0612Trianglemicroworks Scada Data Gateway 2.54.0587Trianglemicroworks Scada Data Gateway 2.54.0586Trianglemicroworks Scada Data Gateway 2.54.0584Trianglemicroworks Scada Data Gateway 2.54.0583Trianglemicroworks Scada Data Gateway 2.54.0582Trianglemicroworks Scada Data Gateway 2.54.0569
NA
CVE-2023-33472
An issue exists in Scada-LTS v2.7.5.2 build 4551883606 and before, allows remote attackers with low-level authentication to escalate privileges, execute arbitrary code, and obtain sensitive information via Event Handlers function.
Scada-lts Scada-lts
NA
CVE-2022-41976
An privilege escalation issue exists in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticated in the application as a low-privileged user to change role (e.g., to administrator) by updating their user profile.
Scada-lts Scada-lts
7.8
CVSSv2
CVE-2012-3011
Directory traversal vulnerability in the web server in Fultek WinTr Scada 4.0.5 and previous versions allows remote malicious users to read arbitrary files via a crafted request.
Fultek Wintr ScadaFultek Wintr Scada 2.5Fultek Wintr Scada 2.0.0
4.3
CVSSv2
CVE-2017-16721
A Cross-site Scripting issue exists in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerability could allow an unauthenticated malicious user to inject arbitrary code.
Geovap Reliance-scadaGeovap Reliance-scada 4.7.3Geovap Reliance-scada 4.7.2
4.9
CVSSv2
CVE-2013-2794
Triangle MicroWorks SCADA Data Gateway 2.50.0309 up to and including 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 up to and including 3.15.0.369, and DNP3 C libraries 3.06.0000 up to and including 3.15.0000 allow physically proximate malicious users to cause a denial of se...
Trianglemicroworks Ansi C Source Code Libraries 3.09.0000Trianglemicroworks Ansi C Source Code Libraries 3.07.0000Trianglemicroworks Ansi C Source Code Libraries 3.14.0000Trianglemicroworks Ansi C Source Code Libraries 3.13.0000Trianglemicroworks Ansi C Source Code Libraries 3.12.0000Trianglemicroworks Ansi C Source Code Libraries 3.11.0000Trianglemicroworks Ansi C Source Code Libraries 3.10.0000Trianglemicroworks Ansi C Source Code Libraries 3.15.0000Trianglemicroworks Ansi C Source Code Libraries 3.08.0000Trianglemicroworks Ansi C Source Code Libraries 3.06.0000Trianglemicroworks .net Communication Protocol Components 3.06.0.171Trianglemicroworks .net Communication Protocol Components 3.15.0.369Trianglemicroworks .net Communication Protocol Components 3.15.00Trianglemicroworks .net Communication Protocol Components 3.11.00Trianglemicroworks .net Communication Protocol Components 3.09.00Trianglemicroworks .net Communication Protocol Components 3.08.00Trianglemicroworks .net Communication Protocol Components 3.07.00Trianglemicroworks .net Communication Protocol Components 3.14.00Trianglemicroworks .net Communication Protocol Components 3.10.00Trianglemicroworks Scada Data Gateway 2.54.0598Trianglemicroworks Scada Data Gateway 2.54.0597Trianglemicroworks Scada Data Gateway 2.54.0596
NA
CVE-2023-0595
A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to the Geo SCADA server's database web port (default 443). Affected products: EcoStruxure Geo SCADA Expert 2019, EcoStr...
Schneider-electric ClearscadaSchneider-electric Ecostruxure Geo Scada Expert 2019 -Schneider-electric Ecostruxure Geo Scada Expert 2020 -Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8108.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8120.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8158.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8182.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8197.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8218.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8269.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8027.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7268.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7322.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7429.2Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7457.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7488.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7522.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7545.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7578.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7613.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7641.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7690.1
NA
CVE-2023-22610
A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific messages are sent to the server over the database server TCP port.
Schneider-electric Ecostruxure Geo Scada Expert 2019 -Schneider-electric Ecostruxure Geo Scada Expert 2020 -Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8108.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8120.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8158.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8182.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8197.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8218.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8269.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8027.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7268.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7322.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7429.2Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7457.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7488.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7522.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7545.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7578.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7613.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7641.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7690.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7714.1
NA
CVE-2023-22611
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure when specific messages are sent to the server over the database server TCP port. Affected Products: EcoStruxure Geo SCADA Expert 2019 - 2021 (formerl...
Schneider-electric Ecostruxure Geo Scada Expert 2019 -Schneider-electric Ecostruxure Geo Scada Expert 2020 -Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8108.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8120.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8158.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8182.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8197.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8218.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8269.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8027.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7268.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7322.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7429.2Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7457.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7488.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7522.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7545.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7578.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7613.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7641.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7690.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7714.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook