Priority LOW 37
Triangle MicroWorks SCADA Data Gateway DbasSectorFileToExecuteOnReset Exposed Dangerous Function Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01878 · Published 2024-05-03 · No fix listed CWE-749
Priority LOW 31
Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0058 · Published 2024-05-03 · No fix listed CWE-219
Priority LOW 32
Triangle MicroWorks SCADA Data Gateway get_config Missing Authentication Information Disclosure Vulnerability.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0101 · Published 2024-05-03 · No fix listed CWE-306
Priority MEDIUM 40
Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00761 · Published 2024-05-03 · No fix listed CWE-321
Priority LOW 38
Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01993 · Published 2024-05-03 · No fix listed CWE-428
Priority LOW 36
Triangle MicroWorks SCADA Data Gateway Trusted Certification Unrestricted Upload of File Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01238 · Published 2024-05-03 · No fix listed CWE-434
Priority LOW 32
Triangle MicroWorks SCADA Data Gateway Workspace Unrestricted Upload Vulnerability.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01536 · Published 2024-05-03 · No fix listed CWE-434
Priority LOW 23
Triangle MicroWorks SCADA Data Gateway Event Log Improper Output Neutralization For Logs Arbitrary File Write Vulnerability.
CVSS 3.0MEDIUM 4.4· Network · High privileges · No interaction · EPSS 0.013 · Published 2024-05-03 · No fix listed CWE-117
Priority LOW 38
Triangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation Vulnerability.
CVSS 3.0HIGH 7.2· Network · High privileges · No interaction · EPSS 0.03442 · Published 2024-05-03 · No fix listed CWE-22
Priority LOW 38
Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00957 · Published 2024-05-03 · No fix listed CWE-22
Priority LOW 26
Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability.
CVSS 3.0MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00241 · Published 2024-05-03 · No fix listed CWE-798
Priority MEDIUM 47
Triangle MicroWorks SCADA Data Gateway Missing Authentication Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02032 · Published 2024-05-03 · No fix listed CWE-306
THREATIST.IORead the docs