Not rated
CVE-2022-24311 A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification…
Description
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by inserting at beginning of file or create a new file in the context of the Data Server potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) | Versions not published |
Other CVEs of Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
The 8 CVEs of Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) →
CVE-2022-24317
A CWE-862: Missing Authorization vulnerability exists that could cause information exposure when an attacker sends a…
Not rated
CVE-2022-24316
A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a…
Not rated
CVE-2022-24315
A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly…
Not rated
CVE-2022-24314
A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of…
Not rated