Trianglemicroworks vulnerabilities
We track 10 vulnerabilities in Trianglemicroworks products across 5 products. 10 are rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2024.
Latest Trianglemicroworks vulnerabilities
- 7.5 High severity
iec_61850_client_source_code_library: Buffer Copy without Checking Size of Input
Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages. The resulting buffer overflow can cause a crash, resulting in a denial of service.
- 8.8 High severity
SCADA Data Gateway: Improper Limitation of a Pathname to a Restricted Directory
Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although
- 7.2 High severity
SCADA Data Gateway: Exposed Dangerous Method or Function
Triangle MicroWorks SCADA Data Gateway DbasSectorFileToExecuteOnReset Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Triangle MicroWorks SCADA Da
- 7.5 High severity
SCADA Data Gateway: Use of Hard-coded Cryptographic Key
Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Triangle MicroWorks SCADA Data Gateway. Au
- 7.2 High severity
SCADA Data Gateway: Unquoted Search Path or Element
Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authe
- 7.2 High severity
SCADA Data Gateway: Unrestricted Upload of File with Dangerous Type
Triangle MicroWorks SCADA Data Gateway Trusted Certification Unrestricted Upload of File Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Triangle MicroWorks SCADA Data Gatew
- 7.2 High severity
SCADA Data Gateway: Improper Limitation of a Pathname to a Restricted Directory
Triangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authe
- 7.8 High severity
SCADA Data Gateway: Improper Limitation of a Pathname to a Restricted Directory
Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. User interaction is requ
- 9.8 Critical severity
SCADA Data Gateway: Missing Authentication for Critical Functionality
Triangle MicroWorks SCADA Data Gateway Missing Authentication Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to exploit this
- 7.5 High severity
Library: IEC 61850: Access of Uninitialized Pointer
The Triangle Microworks IEC 61850 Library (Any client or server using the C language library with a version number of 11.2.0 or earlier and any client or server using the C++, C#, or Java language library with a version number of 5.0.1 or earlier) and 60870-6