Skip to content
OpenAdvisories
High ICSA-22-235-06 5 CVEs

Measuresoft ScadaPro Server and Client

Published Aug 23, 2022 · Updated Aug 23, 2022

Vendor: Measuresoft Product: ScadaPro Server and Client

Summary

Successful exploitation of these vulnerabilities could allow arbitrary code execution, privilege escalation, or a denial-of-service condition.

Vulnerabilities 5

  • High 7.8
    CVE-2022-2894

    Measuresoft ScadaPro Server Untrusted Pointer Dereference

    Measuresoft ScadaPro Server (All Versions) uses unmaintained ActiveX controls. The controls may allow seven untrusted pointer deference instances while processing a specific project file.

    Measuresoft ScadaPro Server
  • High 7.8
    CVE-2022-2895

    Measuresoft ScadaPro Server Stack-based Buffer Overflow

    Measuresoft ScadaPro Server (All Versions) uses unmaintained ActiveX controls. These controls may allow two stack-based buffer overflow instances while processing a specific project file.

    Measuresoft ScadaPro Server
  • High 7.8
    CVE-2022-2896

    Measuresoft ScadaPro Server Use After Free

    Measuresoft ScadaPro Server (All Versions) allows use after free while processing a specific project file.

    Measuresoft ScadaPro Server
  • High 7.8
    CVE-2022-2897

    Measuresoft ScadaPro Server and Client Link Following

    Measuresoft ScadaPro Server and Client (All Versions) do not properly resolve links before file access; this could allow privilege escalation..

    Measuresoft ScadaPro Server and Client
  • Medium 6.1
    CVE-2022-2898

    Measuresoft ScadaPro Server and Client Link Following

    Measuresoft ScadaPro Server and Client (All Versions) do not properly resolve links before file access; this could allow a denial-of-service condition.

    Measuresoft ScadaPro Server and Client

Revision history

  1. #1

    Publication Date

References