Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)
4 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-22805 | Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior) | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of | CRITICAL 9.1 | 0.9 % | ||
| CVE-2021-22804 | Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior) | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause disclosure of arbitrary files be | HIGH 7.5 | 1.3 % | ||
| CVE-2021-22803 | Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior) | A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead to remote code execution through a number of | CRITICAL 9.8 | 1.9 % | ||
| CVE-2021-22802 | Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior) | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing length | CRITICAL 9.8 | 20 % |