Description
In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can append path traversal characters to the filename when using a specific command, allowing them to read arbitrary files from the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rapid Software | Rapid SCADA | ≤ 5.8.4 | — |
Advisories 1
- ICSA-24-011-03 Rapid Software LLC Rapid SCADA CISA ICS & IT advisories · Jan 11, 2024