CVE-2022-46658

CVE-2022-46658

The affected product is vulnerable to a stack-based buffer overflow which could lead to a denial of service or remote code execution.

CVSS 3.1 · 6.5 Medium EPSS 1.2% KEV · Not listed

Vendors

Dataprobe

Products

Iboot-pdu4-c20 Iboot-pdu4-c20 Firmware Iboot-pdu4-n20 and 41 more

CVE-2023-2866

Advantech WebAccess Insufficient Type Distinction

If an attacker can trick an authenticated user into loading a maliciously crafted .zip file onto Advantech WebAccess version 8.4.5, a web shell could be used to give the attacker full control of the SCADA server.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Advantech

Products

Webaccess

CVE-2023-3256

Advantech R-SeeNet External Control of File Name or Path

Advantech R-SeeNet versions 2.4.22 allows low-level users to access and load the content of local files.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Advantech

Products

R-seenet

CVE-2023-2611

Advantech R-SeeNet Use of Hard-coded Credentials

Advantech R-SeeNet versions 2.4.22 is installed with a hidden root-level user that is not available in the users list. This hidden user has a password that cannot be changed by users.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Advantech

Products

R-seenet

CVE-2023-0956

TEL-STER TelWin SCADA WebInterface Path Traversal

External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system.

CVSS 3.1 · 7.5 High EPSS 1.0% KEV · Not listed

Vendors

Tel-ster

Products

Telwin Scada Webinterface

CVE-2023-4212

Trane Thermostats Injection

​A command injection vulnerability exists in Trane XL824, XL850, XL1050, and Pivot thermostats allowing an attacker to execute arbitrary commands as root using a specially crafted filename. The vulnerability requires physical access to the device via a USB stick.

CVSS 3.1 · 6.8 Medium EPSS 1.3% KEV · Not listed

Vendors

Trane

Products

Pivot Pivot Firmware Xl1050 and 5 more

CVE-2023-4299

Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication

Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed

Vendors

Digi

Products

Cm Cm Firmware Connect Es and 36 more

CVE-2023-4487

GE Digital CIMPLICITY Process Control

GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious configuration files in the expected web server execution path to escalate privileges and gain full control of the HMI software.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Ge

Products

Cimplicity

CVE-2023-4485

ARDEREG Sistemas SCADA SQL Injection

ARDEREG ​Sistema SCADA Central versions 2.203 and prior login page are vulnerable to an unauthenticated blind SQL injection attack. An attacker could manipulate the application's SQL query logic to extract sensitive information or perform unauthorized actions within the database. In this case, the vulnerability could allow an attacker to execute arbitrary SQL queries through the login page, potentially leading to unauthorized access, data leakage, or even disruption of critical industrial processes.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Ardereg

Products

Sistemas Scada

CVE-2023-36497

Dover Fueling Solutions MAGLINK LX Web Console Authentication Bypass by Primary Weakness

Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 could allow a guest user to elevate to admin privileges.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Doverfuelingsolutions

Products

Maglink Lx 3 Maglink Lx Web Console Configuration

CVE-2023-5068

Delta Electronics DIAScreen Out-of-bounds Write

Delta Electronics DIAScreen may write past the end of an allocated buffer while parsing a specially crafted input file. This could allow an attacker to execute code in the context of the current process.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Deltaww

Products

Diascreen

CVE-2023-4523

Real Time Automation 460 Series Cross-site Scripting

Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker to run any JavaScript reference from the URL string. If this were to occur, the gateway's HTTP interface would redirect to the main page, which is index.htm.

CVSS 3.1 · 9.4 Critical EPSS < 1% KEV · Not listed

Vendors

Rtautomation

Products

460 Series Firmware 460etcmm 460mcbms and 3 more

CVE-2023-2306

Qognify NiceVision Use of Hard-coded Credentials

Qognify NiceVision versions 3.1 and prior are vulnerable to exposing sensitive information using hard-coded credentials. With these credentials an attacker can retrieve information about the cameras, user information, and modify database records.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Qognify

Products

Nicevision

CVE-2023-4215

Advantech WebAccess Debug Messages Revealing Unnecessary Information

Advantech WebAccess version 9.1.3 contains an exposure of sensitive information to an unauthorized actor vulnerability that could leak user credentials.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Advantech

Products

Webaccess

CVE-2023-34437

Baker Hughes Bently Nevada 3500 System Incorrect Permission Assignment for Critical Resource

Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a vulnerability in their password retrieval functionality which could allow an attacker to access passwords stored on the device.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Bakerhughes

Products

Bentley Nevada 3500 System Bentley Nevada 3500 System Firmware

CVE-2023-36857

Baker Hughes Bently Nevada 3500 System Authentication Bypass by Capture-replay

Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a replay vulnerability which could allow an attacker to replay older captured packets of traffic to the device to gain access.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Bakerhughes

Products

Bentley Nevada 3500 System Bentley Nevada 3500 System Firmware

CVE-2023-5059

Santesoft Sante FFT Imaging Out-of-bounds Read

Santesoft Sante FFT Imaging lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Santesoft

Products

Fft Imaging

CVE-2023-39431

Santesoft Sante DICOM Viewer Pro Out-of-bounds Write

Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Santesoft

Products

Dicom Viewer Pro

CVE-2023-35986

Santesoft Sante DICOM Viewer Pro Stack-based Buffer Overflow

Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Santesoft

Products

Dicom Viewer Pro

CVE-2023-38584

Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow

In Weintek's cMT3000 HMI Web CGI device, the cgi-bin command_wb.cgi contains a stack-based buffer overflow, which could allow an anonymous attacker to hijack control flow and bypass login authentication.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed

Vendors

Weintek

Products

Cmt-fhd Cmt-fhd Firmware Cmt-hdm and 11 more