Log in Start free

Triangle MicroWorks

Products

ProductCVEsExploitedLatest
SCADA Data Gateway15–May 7, 2024
Library: IEC 60870-6 (ICCP/Tase.2)1–Oct 11, 2022
Library: IEC 618501–Oct 11, 2022

Exploited and recent CVEs

  • CVE-2022-0369 High 7.2 Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability 2.3%
  • CVE-2023-39468 High 7.2 Triangle MicroWorks SCADA Data Gateway DbasSectorFileToExecuteOnReset Exposed Dangerous Function Remote Code Execution Vulnerability 1.9%
  • CVE-2023-39467 Medium 5.3 Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability 0.6%
  • CVE-2023-39466 Medium 5.3 Triangle MicroWorks SCADA Data Gateway get_config Missing Authentication Information Disclosure Vulnerability 1.0%
  • CVE-2023-39465 High 7.5 Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability 0.8%
  • CVE-2023-39464 High 7.2 Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability 2.0%
  • CVE-2023-39463 High 7.2 Triangle MicroWorks SCADA Data Gateway Trusted Certification Unrestricted Upload of File Remote Code Execution Vulnerability 1.2%
  • CVE-2023-39462 Medium 6.5 Triangle MicroWorks SCADA Data Gateway Workspace Unrestricted Upload Vulnerability 1.5%
  • CVE-2023-39461 Medium 4.4 Triangle MicroWorks SCADA Data Gateway Event Log Improper Output Neutralization For Logs Arbitrary File Write Vulnerability 1.3%
  • CVE-2023-39460 High 7.2 Triangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation Vulnerability 3.4%
  • CVE-2023-39459 High 7.8 Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability 1.0%
  • CVE-2023-39458 Medium 5.3 Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability 0.2%
  • CVE-2023-39457 Critical 9.8 Triangle MicroWorks SCADA Data Gateway Missing Authentication Vulnerability 2.0%
  • CVE-2023-2187 Medium 5.3 On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send broadcast events to any user via the WebMonitor.An unauthenticated user can use this vulnerability 0.6%
  • CVE-2023-2186 High 8.2 On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message including format string characters to the SCADA Data Gateway 0.7%
  • CVE-2022-38138 High 7.5 The Triangle Microworks IEC 61850 Library (Any client or server using the C language library with a version number of 11.2.0 or earlier and any client or server using the C++, C#, or Java language lib 1.0%
  • CVE-2022-38138 High 7.5 The Triangle Microworks IEC 61850 Library (Any client or server using the C language library with a version number of 11.2.0 or earlier and any client or server using the C++, C#, or Java language lib 1.0%