CVE-2021-22803CWE-434

CVE-2021-22803: falha em Interactive Graphical SCADA System Data…

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Interactive Graphical SCADA System Data Collector

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 1.9%
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead to remote code execution through a number of paths, when an attacker, writes arbitrary files to folders in context of the DC module, by sending constructed messages on the network. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)
Produtos afetados
n/a · Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)