Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-22805 | Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior) | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of | CRITICAL 9.1 | 0.9 % | ||
| CVE-2021-22804 | Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior) | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause disclosure of arbitrary files be | HIGH 7.5 | 1.3 % | ||
| CVE-2021-22803 | Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior) | A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead to remote code execution through a number of | CRITICAL 9.8 | 1.9 % | ||
| CVE-2021-22802 | Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior) | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing length | CRITICAL 9.8 | 20 % |