Description
Integer overflow in Trihedral Engineering VTScada (formerly VTS) 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service (server crash) via a crafted request, which triggers a large memory allocation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Trihedral Engineering | VTS | 6.5 – < 9.1.19, 10 – < 10.2.21 | 9.1.19 |
Advisories 1
- ICSA-14-343-02 Trihedral Engineering Limited VTScada Integer Overflow Vulnerability CISA ICS & IT advisories · Jun 6, 2025