Vulnerabilities

TI-2022-00294 CVE-2022-0369 · GHSA-jhmq-fqq2-2qvv

Path traversal in Triangle MicroWorks SCADA Data Gateway

MEDIUM 44

Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02298 Published 2024-05-07 No fix listed CWE-22

TI-2023-20600 CVE-2023-39468 · GHSA-4p7j-rqc6-ff4w

Triangle MicroWorks SCADA Data Gateway DbasSectorFileToExecuteOnReset Exposed Dangerous…

LOW 37

Triangle MicroWorks SCADA Data Gateway DbasSectorFileToExecuteOnReset Exposed Dangerous Function Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01878 Published 2024-05-03 No fix listed CWE-749

TI-2023-20599 CVE-2023-39467 · GHSA-fm6r-rchp-rg6x

Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability

LOW 31

Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.0058 Published 2024-05-03 No fix listed CWE-219

TI-2023-20598 CVE-2023-39466 · GHSA-8vq2-42cx-f687

Missing authentication in Triangle MicroWorks SCADA Data Gateway

LOW 32

Triangle MicroWorks SCADA Data Gateway get_config Missing Authentication Information Disclosure Vulnerability.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.0101 Published 2024-05-03 No fix listed CWE-306

TI-2023-20597 CVE-2023-39465 · GHSA-m6w5-p6g8-jpm6

Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information…

MEDIUM 40

Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00761 Published 2024-05-03 No fix listed CWE-321

TI-2023-20596 CVE-2023-39464 · GHSA-wj5w-rhm5-2vf6

Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote…

LOW 38

Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01993 Published 2024-05-03 No fix listed CWE-428

TI-2023-20595 CVE-2023-39463 · GHSA-8qpq-fxqg-2p7h

Unrestricted file upload in Triangle MicroWorks SCADA Data Gateway

LOW 36

Triangle MicroWorks SCADA Data Gateway Trusted Certification Unrestricted Upload of File Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01238 Published 2024-05-03 No fix listed CWE-434

TI-2023-20594 CVE-2023-39462 · GHSA-c3j9-rch8-vc7j

Unrestricted file upload in Triangle MicroWorks SCADA Data Gateway

LOW 32

Triangle MicroWorks SCADA Data Gateway Workspace Unrestricted Upload Vulnerability.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01536 Published 2024-05-03 No fix listed CWE-434

TI-2023-20593 CVE-2023-39461 · GHSA-r8p9-94v3-7g9h

Triangle MicroWorks SCADA Data Gateway Event Log Improper Output Neutralization For Logs…

LOW 23

Triangle MicroWorks SCADA Data Gateway Event Log Improper Output Neutralization For Logs Arbitrary File Write Vulnerability.

CVSS 3.0MEDIUM 4.4 Network High privileges No interaction EPSS 0.013 Published 2024-05-03 No fix listed CWE-117

TI-2023-20592 CVE-2023-39460 · GHSA-fvwr-q9h4-788c

Path traversal in Triangle MicroWorks SCADA Data Gateway

LOW 38

Triangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation Vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.03442 Published 2024-05-03 No fix listed CWE-22

TI-2023-20591 CVE-2023-39459 · GHSA-vgvq-3pp8-mvhc

Path traversal in Triangle MicroWorks SCADA Data Gateway

LOW 38

Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00957 Published 2024-05-03 No fix listed CWE-22

TI-2023-20590 CVE-2023-39458 · GHSA-v7hm-ffjj-p8g7

Hard-coded credentials in Triangle MicroWorks SCADA Data Gateway

LOW 26

Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability.

CVSS 3.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00241 Published 2024-05-03 No fix listed CWE-798

TI-2023-20589 CVE-2023-39457 · GHSA-6q7m-wp3m-4734

Missing authentication in Triangle MicroWorks SCADA Data Gateway

MEDIUM 47

Triangle MicroWorks SCADA Data Gateway Missing Authentication Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02032 Published 2024-05-03 No fix listed CWE-306

TI-2023-02051 CVE-2023-2187 · GHSA-qp2h-3p7w-4v89

Missing authentication in Triangle MicroWorks SCADA Data Gateway

LOW 31

On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send broadcast events to any user via the WebMonitor.An unauthenticated user can use this vulnerability to forcefully log ou…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00593 Published 2023-06-07 No fix listed CWE-306

TI-2023-02050 CVE-2023-2186 · GHSA-gqvf-fxmv-5gj9

On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated…

MEDIUM 49

On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message including format string characters to the SCADA Data Gateway to perform unrestric…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00706 Published 2023-06-07 No fix listed CWE-134

TI-2020-08523 CVE-2020-10611 · GHSA-grj9-c593-w7c6

Type confusion in Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122…

MEDIUM 50

Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result i…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05226 Published 2020-04-15 No fix listed CWE-843

TI-2020-08525 CVE-2020-10613 · GHSA-8hcc-5w75-vqhq

Out-of-bounds read in Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122…

LOW 38

Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to disclose sensitive information due to the lack of proper validation of user-supplied data, which can…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02493 Published 2020-04-15 No fix listed CWE-125

TI-2020-08527 CVE-2020-10615 · GHSA-9w3w-gw8r-v3wj

Stack-based buffer overflow in Triangle MicroWorks SCADA Data Gateway 3.02.0697 through…

LOW 38

Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers cause a denial-of-service condition due to a lack of proper validation of the length of user-supplied da…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02568 Published 2020-04-15 No fix listed CWE-121

TI-2014-01860 CVE-2014-2343 · GHSA-fpcj-qxxf-c8wx

Triangle MicroWorks SCADA Data Gateway Resource Exhaustion

LOW 11

Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service (excessive data processing) via a crafted DNP request over a serial line.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00346 Published 2014-05-30 Fixed in v3.00.0635 CWE-400

TI-2014-01859 CVE-2014-2342 · GHSA-v42f-cq7v-587q

Triangle MicroWorks SCADA Data Gateway Resource Exhaustion

LOW 26

Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service (excessive data processing) via a crafted DNP3 packet.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01791 Published 2014-05-30 Fixed in v3.00.0635 CWE-400

TI-2013-02442 CVE-2013-2794 · GHSA-c76r-3279-x52m

Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol…

LOW 22

Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000 through 3.15.0000 allow physically proximate attackers to ca…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00317 Published 2013-09-09 No fix listed CWE-119

TI-2013-02441 CVE-2013-2793 · GHSA-3548-54w8-x56q

Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol…

LOW 37

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0147 Published 2013-09-09 No fix listed CWE-119

Vulnerabilities

Filters