Critical ICSA-20-105-03 3 CVEs

Triangle MicroWorks SCADA Data Gateway

Published Apr 14, 2020 · Updated Apr 14, 2020

Vendor: Triangle MicroWorks Product: SCADA Data Gateway

Summary

These vulnerabilities allow remote attackers to execute arbitrary code and disclose on affected installations of Triangle Microworks SCADA Data Gateway with DNP3 Outstation channels. Authentication is not required to exploit these vulnerabilities.

Vulnerabilities 3

Unscored —

CVE-2020-10611

Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to …

Apr 15, 2020
Unscored —

CVE-2020-10613

Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to …

Apr 15, 2020
Unscored —

CVE-2020-10615

Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers cau…

Apr 15, 2020

Revision history

2020-04-14 #1
ICSA-20-105-03 Triangle MicroWorks SCADA Data Gateway

References

ICS Advisory ICSA-20-105-03 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-105-03
Recommended Practices
https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B