CyberSecBulletin

SDG Technologies vulnerabilities

We track 2 vulnerabilities in SDG Technologies products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 27, 2024.

2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score

Latest SDG Technologies vulnerabilities

  • 9.3 Critical severity

    PnPSCADA: Missing Authorization

    CVE-2024-2882SDG Technologies

    SDG Technologies PnPSCADA allows a remote attacker to attach various entities without requiring system authentication. This breach could potentially lead to unauthorized control, data manipulation, and access to sensitive information within the SCADA system.

  • 7.5 High severity

    PnPSCADA: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2023-1934SDG TechnologiesEPSS 8.08%

    The PnPSCADA system, a product of SDG Technologies CC, is afflicted by a critical unauthenticated error-based PostgreSQL Injection vulnerability. Present within the hitlogcsv.jsp endpoint, this security flaw permits unauthenticated attackers to engage with the