Description
In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration file by utilizing a Zip Slip vulnerability in the unpacking routine to achieve remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rapid Software | Rapid SCADA | ≤ 5.8.4 | — |
Advisories 1
- ICSA-24-011-03 Rapid Software LLC Rapid SCADA CISA ICS & IT advisories · Jan 11, 2024