SCADA Data Gateway vulnerabilities

9 known vulnerabilities in SCADA Data Gateway from Triangle MicroWorks. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  SCADA Data Gateway: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-0369May 7, 2024Triangle MicroWorksEPSS 2.3%

  Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although

• 7.2 High severity

  SCADA Data Gateway: Exposed Dangerous Method or Function

  CVE-2023-39468May 3, 2024Triangle MicroWorksEPSS 1.88%

  Triangle MicroWorks SCADA Data Gateway DbasSectorFileToExecuteOnReset Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Triangle MicroWorks SCADA Da

• 7.5 High severity

  SCADA Data Gateway: Use of Hard-coded Cryptographic Key

  CVE-2023-39465May 3, 2024Triangle MicroWorks

  Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Triangle MicroWorks SCADA Data Gateway. Au

• 7.2 High severity

  SCADA Data Gateway: Unquoted Search Path or Element

  CVE-2023-39464May 3, 2024Triangle MicroWorksEPSS 1.99%

  Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authe

• 7.2 High severity

  SCADA Data Gateway: Unrestricted Upload of File with Dangerous Type

  CVE-2023-39463May 3, 2024Triangle MicroWorksEPSS 1.24%

  Triangle MicroWorks SCADA Data Gateway Trusted Certification Unrestricted Upload of File Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Triangle MicroWorks SCADA Data Gatew

• 7.2 High severity

  SCADA Data Gateway: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-39460May 3, 2024Triangle MicroWorksEPSS 3.44%

  Triangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authe

• 7.8 High severity

  SCADA Data Gateway: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-39459May 3, 2024Triangle MicroWorks

  Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. User interaction is requ

• 9.8 Critical severity

  SCADA Data Gateway: Missing Authentication for Critical Functionality

  CVE-2023-39457May 3, 2024Triangle MicroWorksEPSS 2.03%

  Triangle MicroWorks SCADA Data Gateway Missing Authentication Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to exploit this

• 9.8 Critical severity

  SCADA Data Gateway: Use of Externally-Controlled Format String

  CVE-2023-2186Jun 7, 2023Triangle MicroWorks

  On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message including format string characters to the SCADA Data Gateway to perform unrestricted memory reads.An unauthenticated user