Trihedral kayıtları
Trihedral üreticisine ait 10 yayımlanmış kayıt. Bunların 1 tanesi sahada sömürüldü (CISA KEV listesinde), 1 tanesi için hazır saldırı aracı var.
Araştırmacı profili
- KEV’e giren
- 1 · %10
- Silahlaştırılmış
- 1 · %10
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- 2136 gün
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-125 Out-of-bounds Read1
- CWE-190 Integer Overflow or Wraparound1
- CWE-20 Improper Input Validation1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-284 Improper Access Control1
- CWE-287 Improper Authentication1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
69Bu hafta | CVE-2016-4523Silahlaştırılmış | The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (trihedral · vtscada · CWE-125 | Yüksek7,5KEV | %31,19 Haz 2016 |
44Planlayın | CVE-2016-4532İstismar yok | Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote atttrihedral · vtscada · CWE-22 | Kritik9,1 | %27,69 Haz 2016 |
42Planlayın | CVE-2016-4510İstismar yok | The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and rtrihedral · vtscada · CWE-287 | Kritik9,1 | %20,19 Haz 2016 |
31İzleyin | CVE-2017-6043İstismar yok | A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26.trihedral · vtscada · CWE-400 | Yüksek7,5 | %1,621 Haz 2017 |
31İzleyin | CVE-2017-6045İstismar yok | An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26.trihedral · vtscada · CWE-548 | Yüksek7,5 | %1,621 Haz 2017 |
31İzleyin | CVE-2017-14029İstismar yok | An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior.trihedral · vtscada · CWE-427 | Yüksek7,8 | %0,96 Kas 2017 |
31İzleyin | CVE-2017-14031İstismar yok | An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior.trihedral · vtscada · CWE-284 | Yüksek7,8 | %0,26 Kas 2017 |
30İzleyin | CVE-2022-3181İstismar yok | An Improper Input Validation vulnerability exists in Trihedral VTScada version 12.0.38 and prior.trihedral · vtscada · CWE-20 | Yüksek7,5 | %0,82 Kas 2022 |
24İzleyin | CVE-2017-6053İstismar yok | A Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26.trihedral · vtscada · CWE-79 | Orta6,1 | %0,821 Haz 2017 |
21İzleyin | CVE-2014-9192İstismar yok | Trihedral Engineering Limited VTScada Integer Overflowtrihedral · vtscada · CWE-190 | Orta5,0 | %2,911 Ara 2014 |
- CVE-2016-452369Bu hafta
The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %31trihedral · vtscada9 Haz 2016
- CVE-2016-453244Planlayın
Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote att
KritikCVSS 9,1İstismar yokEPSS %27trihedral · vtscada9 Haz 2016
- CVE-2016-451042Planlayın
The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and r
KritikCVSS 9,1İstismar yokEPSS %20trihedral · vtscada9 Haz 2016
- CVE-2017-604331İzleyin
A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26.
YüksekCVSS 7,5İstismar yokEPSS %1trihedral · vtscada21 Haz 2017
- CVE-2017-604531İzleyin
An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26.
YüksekCVSS 7,5İstismar yokEPSS %1trihedral · vtscada21 Haz 2017
- CVE-2017-1402931İzleyin
An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior.
YüksekCVSS 7,8İstismar yokEPSS %0trihedral · vtscada6 Kas 2017
- CVE-2017-1403131İzleyin
An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior.
YüksekCVSS 7,8İstismar yokEPSS %0trihedral · vtscada6 Kas 2017
- CVE-2022-318130İzleyin
An Improper Input Validation vulnerability exists in Trihedral VTScada version 12.0.38 and prior.
YüksekCVSS 7,5İstismar yokEPSS %0trihedral · vtscada2 Kas 2022
- CVE-2017-605324İzleyin
A Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26.
OrtaCVSS 6,1İstismar yokEPSS %0trihedral · vtscada21 Haz 2017
- CVE-2014-919221İzleyin
Trihedral Engineering Limited VTScada Integer Overflow
OrtaCVSS 5,0İstismar yokEPSS %2trihedral · vtscada11 Ara 2014