Skip to content
OpenAdvisories
High ICSA-22-265-01 1 CVE

Measuresoft ScadaPro Server

Published Sep 22, 2022 · Updated Sep 22, 2022

Vendor: Measuresoft Product: ScadaPro Server

Summary

Successful exploitation of this vulnerability could allow a local user with limited privileges to modify the service binary path and start malicious commands with SYSTEM privileges.

Vulnerabilities 1

  • High 7.8
    CVE-2022-3263

    Measuresoft ScadaPro Server Improper Access Control

    The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limited privileges to modify the service binary path and start malicious commands with SYSTEM privileges.

    Measuresoft ScadaPro Server

Revision history

  1. #1

    Publication Date

References