Rapid SCADA vulnerabilities

3 known vulnerabilities in Rapid SCADA from Rapid Software. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Rapid SCADA: Incorrect Permission Assignment for Critical Resource

  CVE-2024-22016Feb 2, 2024Rapid Software

  In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may allow privilege escalation.

• 9.8 Critical severity

  Rapid SCADA: Use of Hard-coded Credentials

  CVE-2024-21764Feb 2, 2024Rapid Software

  In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials, which may allow an attacker to connect to a specific port.

• 8.8 High severity

  Rapid SCADA: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-21852Feb 1, 2024Rapid SoftwareEPSS 1.23%

  In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration file by utilizing a Zip Slip vulnerability in the unpacking routine to achieve remote code execution.