PT-2026-20524 · Unknown · Scadaapp For Ios

Luis Martinez · Publicado 2026-02-18 · Atualizado 2026-02-18 · CVE-2019-25349

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ScadaApp for iOS version 1.1.4.0

Description The application can be crashed by providing an oversized buffer in the Servername field during login. Specifically, inputting a 257-character buffer can trigger an application crash on iOS devices. The issue results in a denial of service. The vulnerable parameter is Servername.

Recommendations Update to a newer version of ScadaApp for iOS that addresses this issue. As a temporary workaround, limit the length of the input accepted in the Servername field during login to prevent the application from crashing.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

CVE-2019-25349

Produtos afetados

Scadaapp For Ios

Referências · 5

• 🔥 https://exploit-db.com/exploits/47678 · Exploit
• https://vulncheck.com/advisories/scadaapp-for-ios-servername-denial-of-service · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25349 · Nota de Segurança
• https://apps.apple.com/ca/app/scadaapp/id1206266634 · Nota
• https://t.me/cveNotify/152437 · Publicação no Telegram