Triangle Microworks

18 CVEs across 3 Triangle Microworks products. Browse Triangle Microworks vulnerabilities, severities, and proof-of-concept exploits.

Triangle Microworks products with known CVEs

ProductCVEs
Scada Data Gateway17
Library: Iec 60870-6 (Iccp/tase.2)1
Library: Iec 618501
Triangle Microworks CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-0369High8.82024-05-07Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to…
CVE-2023-39468High7.22024-05-03Triangle MicroWorks SCADA Data Gateway DbasSectorFileToExecuteOnReset Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows…
CVE-2023-39467Medium5.32024-05-03Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive infor…
CVE-2023-39466Medium5.32024-05-03Triangle MicroWorks SCADA Data Gateway get_config Missing Authentication Information Disclosure Vulnerability. This vulnerability allows remote attackers to di…
CVE-2023-39465High7.52024-05-03Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability. This vulnerability allows remote attackers to d…
CVE-2023-39464High7.22024-05-03Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability. This vulnerability allows remote attacker…
CVE-2023-39463High7.22024-05-03Triangle MicroWorks SCADA Data Gateway Trusted Certification Unrestricted Upload of File Remote Code Execution Vulnerability. This vulnerability allows remote…
CVE-2023-39462Medium6.52024-05-03Triangle MicroWorks SCADA Data Gateway Workspace Unrestricted Upload Vulnerability. This vulnerability allows remote attackers to upload arbitrary files on aff…
CVE-2023-39461Medium4.42024-05-03Triangle MicroWorks SCADA Data Gateway Event Log Improper Output Neutralization For Logs Arbitrary File Write Vulnerability. This vulnerability allows remote a…
CVE-2023-39460High7.22024-05-03Triangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to creat…
CVE-2023-39459High7.82024-05-03Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrar…
CVE-2023-39458Medium5.32024-05-03Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers…
CVE-2023-39457Critical9.82024-05-03Triangle MicroWorks SCADA Data Gateway Missing Authentication Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected in…
CVE-2023-2187Medium5.32023-06-07On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send broadcast events to any user via the WebMonitor.An unauthe…
CVE-2023-2186High8.22023-06-07On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message including format str…
CVE-2022-38138High7.52022-10-11The Triangle Microworks IEC 61850 Library (Any client or server using the C language library with a version number of 11.2.0 or earlier and any client or serve…
CVE-2014-23432014-05-30Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service (excessive data processing) via a cr…
CVE-2014-23422014-05-30Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service (excessive data processing) via a crafted DNP3 pac…