Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) vulnerabilities
We track 8 vulnerabilities in Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on February 9, 2022.
Latest Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) vulnerabilities
- 7.5 High severity
Interactive Graphical SCADA System Data Server…: Missing Authorization
A CWE-862: Missing Authorization vulnerability exists that could cause information exposure when an attacker sends a specific message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
- 7.5 High severity
Interactive Graphical SCADA System Data Server…: Improper Initialization
A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
- 7.5 High severity
Interactive Graphical SCADA System Data Server…: Out-of-bounds Read
A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
- 7.5 High severity
Interactive Graphical SCADA System Data Server…: Out-of-bounds Read
A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attacker repeatedly sends a specially crafted message. Affected Product: Interactive Graphical SCADA System Data Server (V15.0.0
- 9.8 Critical severity
Interactive Graphical SCADA System Data Server…: Buffer Copy without Checking Size of Input
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an attacker sends a specially crafted message. Affected Product: Interactive Graphical S
- 9.8 Critical severity
Interactive Graphical SCADA System Data Server…: Improper Limitation of a Pathname to a Restricted Directory
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by adding at end of file or create a new file in the context of the Data Server potentially leading to remote code exec
- 9.8 Critical severity
Interactive Graphical SCADA System Data Server…: Improper Limitation of a Pathname to a Restricted Directory
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by inserting at beginning of file or create a new file in the context of the Data Server potentially leading to remote
- 9.8 Critical severity
Interactive Graphical SCADA System Data Server…: Integer Overflow or Wraparound
A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when an attacker sends multiple specially crafted messages. Affected Product: Interac