CVE-2014-2342CWE-400

CVE-2014-2342: fallo en Triangle MicroWorks SCADA Data Gateway

Triangle MicroWorks SCADA Data Gateway Resource Exhaustion

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear SCADA Data Gateway

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 4.3epss 1.8%
Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service (excessive data processing) via a crafted DNP3 packet.
AV:N/AC:M/Au:N/C:N/I:N/A:P
Productos afectados
Triangle MicroWorks · SCADA Data Gateway
CVEs relacionadas — Triangle MicroWorks SCADA Data Gateway

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-39460HIGHTriangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation VulnerabilityEPSS 3.4%CVE-2022-0369HIGHTriangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution VulnerabilityEPSS 2.3%CVE-2023-39457CRITICALTriangle MicroWorks SCADA Data Gateway Missing Authentication VulnerabilityEPSS 2.0%CVE-2023-39464HIGHTriangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution VulnerabilityEPSS 2.0%CVE-2023-39468HIGHTriangle MicroWorks SCADA Data Gateway DbasSectorFileToExecuteOnReset Exposed Dangerous Function Remote Code Execution VulnerabilityEPSS 1.9%CVE-2023-39462MEDIUMTriangle MicroWorks SCADA Data Gateway Workspace Unrestricted Upload VulnerabilityEPSS 1.5%