Skip to content
OpenAdvisories

Vendor

xArrow

3 known vulnerabilities.

Products

xArrow SCADA 3 SCADA 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.6
    CVE-2021-33025

    xArrow SCADA Path Traversal

    xArrow SCADA versions 7.2 and prior permits unvalidated registry keys to be run with application-level privileges.

    xArrow xArrow SCADA
  • Medium 6.1
    CVE-2021-33021

    xArrow SCADA Cross-site Scripting

    xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘edate’ of the resource xhisalarm.htm, which may allow an unauthorized attacker to execute arbitrary code.

    xArrow xArrow SCADA
  • Medium 6.1
    CVE-2021-33001

    xArrow SCADA Cross-site Scripting

    xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘bdate’ of the resource xhisvalue.htm, which may allow an unauthorized attacker to execute arbitrary code.

    xArrow xArrow SCADA