CVE-2022-2006

AutomationDirect C-more EA9 HMI Uncontrolled Search Path Element

AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code during the installation process. This issue affects: AutomationDirect C-more EA9 EA9-T6CL versions prior to 6.73; EA9-T6CL-R versions prior to 6.73; EA9-T7CL versions prior to 6.73; EA9-T7CL-R versions prior to 6.73; EA9-T8CL versions prior to 6.73; EA9-T10CL versions prior to 6.73; EA9-T10WCL versions prior to 6.73; EA9-T12CL versions prior to 6.73; EA9-T15CL versions prior to 6.73; EA9-RHMI versions prior to 6.73; EA9-PGMSW versions prior to 6.73;

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Automationdirect

Products

C-more Ea9-pgmsw C-more Ea9-pgmsw Firmware C-more Ea9-rhmi and 21 more

CVE-2022-1405

Delta Electronics CNCSoft Stack-based Buffer Overflow

CNCSoft: All versions prior to 1.01.32 does not properly sanitize input while processing a specific project file, allowing a possible stack-based buffer overflow condition.

CVSS 3.1 · 7.8 High EPSS 2.2% KEV · Not listed

Vendors

Deltaww

Products

Cncsoft

CVE-2022-2485

AutomationDirect Stride Field I/O Cleartext Transmission of Sensitive Information

Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets.

CVSS 3.1 · 9.6 Critical EPSS < 1% KEV · Not listed

Vendors

Automationdirect

Products

Sio-mb04ads Sio-mb04ads Firmware Sio-mb04das and 17 more

CVE-2022-2866

FATEK Automation FvDesigner Out-of-bounds Write

FATEK FvDesigner version 1.5.103 and prior is vulnerable to an out-of-bounds write while processing project files. If a valid user is tricked into using maliciously crafted project files, an attacker could achieve arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Fatek

Products

Fvdesigner

CVE-2022-2892

Measuresoft ScadaPro Server Out-of-bounds Write

Measuresoft ScadaPro Server (Versions prior to 6.8.0.1) uses an unmaintained ActiveX control, which may allow an out-of-bounds write condition while processing a specific project file.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Measuresoft

Products

Scadapro Server

CVE-2022-2895

Measuresoft ScadaPro Server Stack-based Buffer Overflow

Measuresoft ScadaPro Server (All Versions) uses unmaintained ActiveX controls. These controls may allow two stack-based buffer overflow instances while processing a specific project file.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Measuresoft

Products

Scadapro Server

CVE-2022-2897

Measuresoft ScadaPro Server and Client Link Following

Measuresoft ScadaPro Server and Client (All Versions) do not properly resolve links before file access; this could allow privilege escalation..

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Measuresoft

Products

Scadapro Client Scadapro Server

CVE-2022-2896

Measuresoft ScadaPro Server Use After Free

Measuresoft ScadaPro Server (All Versions) allows use after free while processing a specific project file.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Measuresoft

Products

Scadapro Server

CVE-2022-2979

Omron CX-Programmer

Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Omron

Products

Cx-programmer

CVE-2022-36385

Contec Health CMS8000

A threat actor with momentary access to the device can plug in a USB drive and perform a malicious firmware update, resulting in permanent changes to device functionality. No authentication or controls are in place to prevent a threat actor from maliciously modifying firmware and performing a drive-by attack to load the firmware on any CMS8000 device.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Contechealth

Products

Cms8000 Cms8000 Firmware

CVE-2022-2333

Honeywell SoftMaster Uncontrolled Search Path Element

If an attacker manages to trick a valid user into loading a malicious DLL, the attacker may be able to achieve code execution in Honeywell SoftMaster version 4.51 application’s context and permissions.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed

Vendors

Honeywell

Products

Softmaster

CVE-2022-3263

Measuresoft ScadaPro Server Improper Access Control

The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limited privileges to modify the service binary path and start malicious commands with SYSTEM privileges.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Measuresoft

Products

Scadapro Server

CVE-2022-3397

OMRON CX-Programmer Out-of-bounds Write

OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Omron

Products

Cx-programmer

CVE-2022-3398

OMRON CX-Programmer Out-of-bounds Write

OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Omron

Products

Cx-programmer

CVE-2022-3396

OMRON CX-Programmer Out-of-bounds Write

OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Omron

Products

Cx-programmer

CVE-2021-27406

PerFact OpenVPN-Client

An attacker can take leverage on PerFact OpenVPN-Client versions 1.4.1.0 and prior to send the config command from any application running on the local host machine to force the back-end server into initializing a new open-VPN instance with arbitrary open-VPN configuration. This could result in the attacker achieving execution with privileges of a SYSTEM user.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed

Vendors

Perfact

Products

Openvpn-client

CVE-2022-40965

Delta Electronics DIAEnergie

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PostEnergyType API.

CVSS 3.1 · 8.7 High EPSS 11.2% KEV · Not listed

Vendors

Deltaww

Products

Diaenergie

CVE-2022-41555

Delta Electronics DIAEnergie

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PutLineMessageSetting API.

CVSS 3.1 · 8.7 High EPSS 11.2% KEV · Not listed

Vendors

Deltaww

Products

Diaenergie

CVE-2022-40967

Delta Electronics DIAEnergie

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckIoTHubNameExisted. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

CVSS 3.1 · 8.8 High EPSS 8.0% KEV · Not listed

Vendors

Deltaww

Products

Diaenergie

CVE-2022-41701

Delta Electronics DIAEnergie

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PutShift API.

CVSS 3.1 · 8.7 High EPSS 11.2% KEV · Not listed

Vendors

Deltaww

Products

Diaenergie