Auth bypass in Sdg Technologies Pnpscada
CVE-2024-2882
SDG Technologies PnPSCADA allows a remote attacker to attach various entities without requiring system authentication. This breach could potentially lead to unauthorized control, data manipulation, and access to sensitive information within the SCADA system.
Vulnerability class: Broken Access Control
EPSS: 0.007 (47.7th percentile) — read the EPSS interpretation.
Affected products
- Sdg Technologies Pnpscada — versions 0
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (government-resource)