trianglemicroworks kayıtları
trianglemicroworks üreticisine ait 25 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-306 Missing Authentication for Critical Function3
- CWE-400 Uncontrolled Resource Consumption2
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-121 Stack-based Buffer Overflow2
- CWE-434 Unrestricted Upload of File with Dangerous Type2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
25 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2020-10611İstismar yok | Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary codtrianglemicroworks · scada data gateway · CWE-843 | Kritik9,8 | — | %5,2 | 15 Nis 2020 |
40Planlayın | CVE-2023-39457İstismar yok | Triangle MicroWorks SCADA Data Gateway Missing Authentication Vulnerabilitytrianglemicroworks · scada data gateway · CWE-306 | Kritik9,8 | — | %2,0 | 2 May 2024 |
39İzleyin | CVE-2020-6996İstismar yok | Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are atrianglemicroworks · dnp3 source code library · CWE-121 | Kritik9,8 | — | %1,3 | 15 Nis 2020 |
39İzleyin | CVE-2023-2186İstismar yok | On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message itrianglemicroworks · scada data gateway · CWE-134 | Kritik9,8 | — | %0,7 | 7 Haz 2023 |
36İzleyin | CVE-2022-0369İstismar yok | Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerabilitytrianglemicroworks · scada data gateway · CWE-22 | Yüksek8,8 | — | %2,3 | 7 May 2024 |
31İzleyin | CVE-2020-10615İstismar yok | Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers cause a denial-of-servictrianglemicroworks · scada data gateway · CWE-121 | Yüksek7,5 | — | %2,6 | 15 Nis 2020 |
31İzleyin | CVE-2020-10613İstismar yok | Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to disclose sensitive intrianglemicroworks · scada data gateway · CWE-125 | Yüksek7,5 | — | %2,5 | 15 Nis 2020 |
31İzleyin | CVE-2013-2793İstismar yok | Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C trianglemicroworks · .net communication protocol components · CWE-119 | Yüksek7,8 | — | %1,5 | 9 Eyl 2013 |
31İzleyin | CVE-2023-39459İstismar yok | Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerabilitytrianglemicroworks · scada data gateway · CWE-22 | Yüksek7,8 | — | %1,0 | 2 May 2024 |
30İzleyin | CVE-2022-38138İstismar yok | The Triangle Microworks IEC 61850 Library (Any client or server using the C language library with a version number of 11.2.0 or earlier and trianglemicroworks · iec 60870-6 software library · CWE-824 | Yüksek7,5 | — | %0,9 | 11 Eki 2022 |
30İzleyin | CVE-2023-39465İstismar yok | Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerabilitytrianglemicroworks · scada data gateway · CWE-321 | Yüksek7,5 | — | %0,8 | 2 May 2024 |
30İzleyin | CVE-2024-34057İstismar yok | Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages.trianglemicroworks · iec 61850 source code library · CWE-120 | Yüksek7,5 | — | %0,4 | 18 Eyl 2024 |
29İzleyin | CVE-2023-39460İstismar yok | Triangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation Vulnerabilitytrianglemicroworks · scada data gateway · CWE-22 | Yüksek7,2 | — | %3,4 | 2 May 2024 |
29İzleyin | CVE-2023-39464İstismar yok | Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerabilitytrianglemicroworks · scada data gateway · CWE-428 | Yüksek7,2 | — | %2,0 | 2 May 2024 |
29İzleyin | CVE-2023-39468İstismar yok | Triangle MicroWorks SCADA Data Gateway DbasSectorFileToExecuteOnReset Exposed Dangerous Function Remote Code Execution Vulnerabilitytrianglemicroworks · scada data gateway · CWE-749 | Yüksek7,2 | — | %1,9 | 2 May 2024 |
28İzleyin | CVE-2023-39463İstismar yok | Triangle MicroWorks SCADA Data Gateway Trusted Certification Unrestricted Upload of File Remote Code Execution Vulnerabilitytrianglemicroworks · scada data gateway · CWE-434 | Yüksek7,2 | — | %1,2 | 2 May 2024 |
26İzleyin | CVE-2023-39462İstismar yok | Triangle MicroWorks SCADA Data Gateway Workspace Unrestricted Upload Vulnerabilitytrianglemicroworks · scada data gateway · CWE-434 | Orta6,5 | — | %1,5 | 2 May 2024 |
21İzleyin | CVE-2014-2342İstismar yok | Triangle MicroWorks SCADA Data Gateway Resource Exhaustiontrianglemicroworks · scada data gateway · CWE-400 | Orta5,0 | — | %1,8 | 30 May 2014 |
21İzleyin | CVE-2023-39466İstismar yok | Triangle MicroWorks SCADA Data Gateway get_config Missing Authentication Information Disclosure Vulnerabilitytrianglemicroworks · scada data gateway · CWE-306 | Orta5,3 | — | %1,0 | 2 May 2024 |
21İzleyin | CVE-2023-2187İstismar yok | On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send broadcast events to any user via the Wetrianglemicroworks · scada data gateway · CWE-306 | Orta5,3 | — | %0,6 | 7 Haz 2023 |
21İzleyin | CVE-2023-39467İstismar yok | Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerabilitytrianglemicroworks · scada data gateway · CWE-219 | Orta5,3 | — | %0,6 | 2 May 2024 |
21İzleyin | CVE-2023-39458İstismar yok | Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerabilitytrianglemicroworks · scada data gateway · CWE-798 | Orta5,3 | — | %0,2 | 2 May 2024 |
19İzleyin | CVE-2013-2794İstismar yok | Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C trianglemicroworks · ansi c source code libraries · CWE-119 | Orta4,9 | — | %0,3 | 9 Eyl 2013 |
17İzleyin | CVE-2023-39461İstismar yok | Triangle MicroWorks SCADA Data Gateway Event Log Improper Output Neutralization For Logs Arbitrary File Write Vulnerabilitytrianglemicroworks · scada data gateway · CWE-117 | Orta4,4 | — | %1,3 | 2 May 2024 |
8İzleyin | CVE-2014-2343İstismar yok | Triangle MicroWorks SCADA Data Gateway Resource Exhaustiontrianglemicroworks · scada data gateway · CWE-400 | Düşük2,1 | — | %0,3 | 30 May 2014 |
- CVE-2020-1061141Planlayın
Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary cod
KritikCVSS 9,8İstismar yokEPSS %5trianglemicroworks · scada data gateway15 Nis 2020
- CVE-2023-3945740Planlayın
Triangle MicroWorks SCADA Data Gateway Missing Authentication Vulnerability
KritikCVSS 9,8İstismar yokEPSS %2trianglemicroworks · scada data gateway2 May 2024
- CVE-2020-699639İzleyin
Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are a
KritikCVSS 9,8İstismar yokEPSS %1trianglemicroworks · dnp3 source code library15 Nis 2020
- CVE-2023-218639İzleyin
On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message i
KritikCVSS 9,8İstismar yokEPSS %1trianglemicroworks · scada data gateway7 Haz 2023
- CVE-2022-036936İzleyin
Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2trianglemicroworks · scada data gateway7 May 2024
- CVE-2020-1061531İzleyin
Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers cause a denial-of-servic
YüksekCVSS 7,5İstismar yokEPSS %3trianglemicroworks · scada data gateway15 Nis 2020
- CVE-2020-1061331İzleyin
Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to disclose sensitive in
YüksekCVSS 7,5İstismar yokEPSS %2trianglemicroworks · scada data gateway15 Nis 2020
- CVE-2013-279331İzleyin
Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C
YüksekCVSS 7,8İstismar yokEPSS %1trianglemicroworks · .net communication protocol components9 Eyl 2013
- CVE-2023-3945931İzleyin
Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %1trianglemicroworks · scada data gateway2 May 2024
- CVE-2022-3813830İzleyin
The Triangle Microworks IEC 61850 Library (Any client or server using the C language library with a version number of 11.2.0 or earlier and
YüksekCVSS 7,5İstismar yokEPSS %1trianglemicroworks · iec 60870-6 software library11 Eki 2022
- CVE-2023-3946530İzleyin
Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1trianglemicroworks · scada data gateway2 May 2024
- CVE-2024-3405730İzleyin
Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages.
YüksekCVSS 7,5İstismar yokEPSS %0trianglemicroworks · iec 61850 source code library18 Eyl 2024
- CVE-2023-3946029İzleyin
Triangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %3trianglemicroworks · scada data gateway2 May 2024
- CVE-2023-3946429İzleyin
Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %2trianglemicroworks · scada data gateway2 May 2024
- CVE-2023-3946829İzleyin
Triangle MicroWorks SCADA Data Gateway DbasSectorFileToExecuteOnReset Exposed Dangerous Function Remote Code Execution Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %2trianglemicroworks · scada data gateway2 May 2024
- CVE-2023-3946328İzleyin
Triangle MicroWorks SCADA Data Gateway Trusted Certification Unrestricted Upload of File Remote Code Execution Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %1trianglemicroworks · scada data gateway2 May 2024
- CVE-2023-3946226İzleyin
Triangle MicroWorks SCADA Data Gateway Workspace Unrestricted Upload Vulnerability
OrtaCVSS 6,5İstismar yokEPSS %2trianglemicroworks · scada data gateway2 May 2024
- CVE-2014-234221İzleyin
Triangle MicroWorks SCADA Data Gateway Resource Exhaustion
OrtaCVSS 5,0İstismar yokEPSS %2trianglemicroworks · scada data gateway30 May 2014
- CVE-2023-3946621İzleyin
Triangle MicroWorks SCADA Data Gateway get_config Missing Authentication Information Disclosure Vulnerability
OrtaCVSS 5,3İstismar yokEPSS %1trianglemicroworks · scada data gateway2 May 2024
- CVE-2023-218721İzleyin
On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send broadcast events to any user via the We
OrtaCVSS 5,3İstismar yokEPSS %1trianglemicroworks · scada data gateway7 Haz 2023
- CVE-2023-3946721İzleyin
Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability
OrtaCVSS 5,3İstismar yokEPSS %1trianglemicroworks · scada data gateway2 May 2024
- CVE-2023-3945821İzleyin
Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0trianglemicroworks · scada data gateway2 May 2024
- CVE-2013-279419İzleyin
Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C
OrtaCVSS 4,9İstismar yokEPSS %0trianglemicroworks · ansi c source code libraries9 Eyl 2013
- CVE-2023-3946117İzleyin
Triangle MicroWorks SCADA Data Gateway Event Log Improper Output Neutralization For Logs Arbitrary File Write Vulnerability
OrtaCVSS 4,4İstismar yokEPSS %1trianglemicroworks · scada data gateway2 May 2024
- CVE-2014-23438İzleyin
Triangle MicroWorks SCADA Data Gateway Resource Exhaustion
DüşükCVSS 2,1İstismar yokEPSS %0trianglemicroworks · scada data gateway30 May 2014