An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior. The program will execute specially crafted malicious dll files placed on the target machine.
oryginał ENCVSS Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HTrihedral Vtscada
APPTrihedral≤ 11.3.03
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Powiązane podatności
CVE-2016-4510CRITICAL9.1PL ✓ten sam produkt
Auth Bypass w interfejsie WAP Trihedral VTScada — odczyt dowolnych plików
CVE-2016-4532CRITICAL9.1PL ✓ten sam produkt
Path Traversal w interfejsie WAP Trihedral VTScada – odczyt dowolnych plików
CVE-2016-4523HIGH7.5⚠ KEVten sam produkt
The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers ...
CVE-2022-3181HIGH7.5ten sam produkt
An Improper Input Validation vulnerability exists in Trihedral VTScada version 12.0.38 and prior. A specifical...
CVE-2017-14031HIGH7.8ten sam produkt
An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. A local, non-administr...