PnPSCADA vulnerabilities

2 known vulnerabilities in PnPSCADA from SDG Technologies. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  PnPSCADA: Missing Authorization

  CVE-2024-2882Jun 27, 2024SDG Technologies

  SDG Technologies PnPSCADA allows a remote attacker to attach various entities without requiring system authentication. This breach could potentially lead to unauthorized control, data manipulation, and access to sensitive information within the SCADA system.

• 7.5 High severity

  PnPSCADA: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-1934May 12, 2023SDG TechnologiesEPSS 8.08%

  The PnPSCADA system, a product of SDG Technologies CC, is afflicted by a critical unauthenticated error-based PostgreSQL Injection vulnerability. Present within the hitlogcsv.jsp endpoint, this security flaw permits unauthenticated attackers to engage with the