Triangle MicroWorks SCADA Data Gateway

• CVE-2022-0369 High 7.2 Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability 2.3%
• CVE-2023-39468 High 7.2 Triangle MicroWorks SCADA Data Gateway DbasSectorFileToExecuteOnReset Exposed Dangerous Function Remote Code Execution Vulnerability 1.9%
• CVE-2023-39467 Medium 5.3 Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability 0.6%
• CVE-2023-39466 Medium 5.3 Triangle MicroWorks SCADA Data Gateway get_config Missing Authentication Information Disclosure Vulnerability 1.0%
• CVE-2023-39465 High 7.5 Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability 0.8%
• CVE-2023-39464 High 7.2 Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability 2.0%
• CVE-2023-39463 High 7.2 Triangle MicroWorks SCADA Data Gateway Trusted Certification Unrestricted Upload of File Remote Code Execution Vulnerability 1.2%
• CVE-2023-39462 Medium 6.5 Triangle MicroWorks SCADA Data Gateway Workspace Unrestricted Upload Vulnerability 1.5%
• CVE-2023-39461 Medium 4.4 Triangle MicroWorks SCADA Data Gateway Event Log Improper Output Neutralization For Logs Arbitrary File Write Vulnerability 1.3%
• CVE-2023-39460 High 7.2 Triangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation Vulnerability 3.4%
• CVE-2023-39459 High 7.8 Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability 1.0%
• CVE-2023-39458 Medium 5.3 Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability 0.2%
• CVE-2023-39457 Critical 9.8 Triangle MicroWorks SCADA Data Gateway Missing Authentication Vulnerability 2.0%
• CVE-2023-2187 Medium 5.3 On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send broadcast events to any user via the WebMonitor.An unauthenticated user can use this vulnerability 0.6%
• CVE-2023-2186 High 8.2 On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message including format string characters to the SCADA Data Gateway 0.7%