Triangle MicroWorks vulnerabilities
We track 10 vulnerabilities in Triangle MicroWorks products across 3 products. 10 are rated high or critical, and none are known to be exploited. The most recent was published on May 7, 2024.
Latest Triangle MicroWorks vulnerabilities
- 8.8 High severity
SCADA Data Gateway: Improper Limitation of a Pathname to a Restricted Directory
Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although
- 7.2 High severity
SCADA Data Gateway: Exposed Dangerous Method or Function
Triangle MicroWorks SCADA Data Gateway DbasSectorFileToExecuteOnReset Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Triangle MicroWorks SCADA Da
- 7.5 High severity
SCADA Data Gateway: Use of Hard-coded Cryptographic Key
Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Triangle MicroWorks SCADA Data Gateway. Au
- 7.2 High severity
SCADA Data Gateway: Unquoted Search Path or Element
Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authe
- 7.2 High severity
SCADA Data Gateway: Unrestricted Upload of File with Dangerous Type
Triangle MicroWorks SCADA Data Gateway Trusted Certification Unrestricted Upload of File Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Triangle MicroWorks SCADA Data Gatew
- 7.2 High severity
SCADA Data Gateway: Improper Limitation of a Pathname to a Restricted Directory
Triangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authe
- 7.8 High severity
SCADA Data Gateway: Improper Limitation of a Pathname to a Restricted Directory
Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. User interaction is requ
- 9.8 Critical severity
SCADA Data Gateway: Missing Authentication for Critical Functionality
Triangle MicroWorks SCADA Data Gateway Missing Authentication Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to exploit this
- 9.8 Critical severity
SCADA Data Gateway: Use of Externally-Controlled Format String
On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message including format string characters to the SCADA Data Gateway to perform unrestricted memory reads.An unauthenticated user
- 7.5 High severity
Library: IEC 61850: Access of Uninitialized Pointer
The Triangle Microworks IEC 61850 Library (Any client or server using the C language library with a version number of 11.2.0 or earlier and any client or server using the C++, C#, or Java language library with a version number of 5.0.1 or earlier) and 60870-6