What is CVE-2023-39461?

CVE-2023-39461 is a medium-severity vulnerability in Triangle Microworks Scada Data Gateway, classified under Improper Output Neutralization for Logs. CVSS score: 4.4/10. Published 2024-05-03.

How severe is CVE-2023-39461?

Medium severity. CVSS v3 base score is 4.4 out of 10.

Vulnerability in Triangle Microworks Scada Data Gateway

CVE-2023-39461

Triangle MicroWorks SCADA Data Gateway Event Log Improper Output Neutralization For Logs Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to write arbitrary files on affected installations of Triangle MicroWor…

EPSS: 0.010 (59.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N.

Affected products

Triangle Microworks Scada Data Gateway — versions 5.1.3.20324
Trianglemicroworks Scada_data_gateway — versions 5.1.3.20324

Weakness classification (CWE)

CWE-117 — Improper Output Neutralization for Logs

References

zdi-disclosures@trendmicro.com (x_research-advisory, Third Party Advisory)
zdi-disclosures@trendmicro.com (vendor-advisory, Release Notes)

Frequently asked questions

What is CVE-2023-39461?: CVE-2023-39461 is a medium-severity vulnerability in Triangle Microworks Scada Data Gateway, classified under Improper Output Neutralization for Logs. CVSS score: 4.4/10. Published 2024-05-03.
How severe is CVE-2023-39461?: Medium severity. CVSS v3 base score is 4.4 out of 10.