Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
8 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-24317 | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) | A CWE-862: Missing Authorization vulnerability exists that could cause information exposure when an attacker sends a specific message. Affec | HIGH 7.5 | 1.2 % | ||
| CVE-2022-24316 | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) | A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a specially crafted mes | HIGH 7.5 | 1.3 % | ||
| CVE-2022-24315 | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) | A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted | HIGH 7.5 | 19 % | ||
| CVE-2022-24314 | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) | A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attacker | HIGH 7.5 | 18 % | ||
| CVE-2022-24313 | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leadin | CRITICAL 9.8 | 45 % | ||
| CVE-2022-24312 | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file | CRITICAL 9.8 | 3.5 % | ||
| CVE-2022-24311 | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file | CRITICAL 9.8 | 3.5 % | ||
| CVE-2022-24310 | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) | A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and | CRITICAL 9.8 | 2.2 % |