Description
In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthenticated attacker to send a HTTP GET requests to the SCADA system and inject arbitrary sensor readings.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ScadaBR | ScadaBR | 1.2.0 | — |
Advisories 1
- ICSA-26-139-03 ScadaBR CISA ICS & IT advisories · May 19, 2026
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-139-03 government-resource