Trianglemicroworks
25 CVEs across 7 Trianglemicroworks products. Browse Trianglemicroworks vulnerabilities, severities, and proof-of-concept exploits.
Trianglemicroworks products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-34057 | High | 7.5 | 2024-09-18 | Triangle Microworks TMW IEC 61850 Client source code libraries before 12.2.0 lack a buffer size check when processing received messages. The resulting buffer o… |
CVE-2022-0369 | High | 8.8 | 2024-05-07 | Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to… |
CVE-2023-39468 | High | 7.2 | 2024-05-03 | Triangle MicroWorks SCADA Data Gateway DbasSectorFileToExecuteOnReset Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows… |
CVE-2023-39467 | Medium | 5.3 | 2024-05-03 | Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive infor… |
CVE-2023-39466 | Medium | 5.3 | 2024-05-03 | Triangle MicroWorks SCADA Data Gateway get_config Missing Authentication Information Disclosure Vulnerability. This vulnerability allows remote attackers to di… |
CVE-2023-39465 | High | 7.5 | 2024-05-03 | Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability. This vulnerability allows remote attackers to d… |
CVE-2023-39464 | High | 7.2 | 2024-05-03 | Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability. This vulnerability allows remote attacker… |
CVE-2023-39463 | High | 7.2 | 2024-05-03 | Triangle MicroWorks SCADA Data Gateway Trusted Certification Unrestricted Upload of File Remote Code Execution Vulnerability. This vulnerability allows remote… |
CVE-2023-39462 | Medium | 6.5 | 2024-05-03 | Triangle MicroWorks SCADA Data Gateway Workspace Unrestricted Upload Vulnerability. This vulnerability allows remote attackers to upload arbitrary files on aff… |
CVE-2023-39461 | Medium | 4.4 | 2024-05-03 | Triangle MicroWorks SCADA Data Gateway Event Log Improper Output Neutralization For Logs Arbitrary File Write Vulnerability. This vulnerability allows remote a… |
CVE-2023-39460 | High | 7.2 | 2024-05-03 | Triangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to creat… |
CVE-2023-39459 | High | 7.8 | 2024-05-03 | Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrar… |
CVE-2023-39458 | Medium | 5.3 | 2024-05-03 | Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers… |
CVE-2023-39457 | Critical | 9.8 | 2024-05-03 | Triangle MicroWorks SCADA Data Gateway Missing Authentication Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected in… |
CVE-2023-2187 | Medium | 5.3 | 2023-06-07 | On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send broadcast events to any user via the WebMonitor.An unauthe… |
CVE-2023-2186 | High | 8.2 | 2023-06-07 | On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message including format str… |
CVE-2022-38138 | High | 7.5 | 2022-10-11 | The Triangle Microworks IEC 61850 Library (Any client or server using the C language library with a version number of 11.2.0 or earlier and any client or serve… |
CVE-2020-6996 | Critical | 9.8 | 2020-04-15 | Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are affected:3.16.00 thr… |
CVE-2020-10615 | High | 7.5 | 2020-04-15 | Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers cause a denial-of-service condition due to… |
CVE-2020-10613 | High | 7.5 | 2020-04-15 | Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to disclose sensitive information due to th… |
CVE-2020-10611 | Critical | 9.8 | 2020-04-15 | Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary code due to the lack o… |
CVE-2014-2343 | | 2014-05-30 | Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service (excessive data processing) via a cr… | |
CVE-2014-2342 | | 2014-05-30 | Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service (excessive data processing) via a crafted DNP3 pac… | |
CVE-2013-2794 | | 2013-09-09 | Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000… | |
CVE-2013-2793 | | 2013-09-09 | Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000… |