PT-2026-21800 · Insat · Insat Masterscada Buk-Ts

Adem El Adeb · Publicado 2024-11-06 · Atualizado 2026-02-27 · CVE-2026-22553

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions InSAT MasterSCADA BUK-TS (affected versions not specified)

Description All versions of InSAT MasterSCADA BUK-TS are susceptible to OS command injection through a field in its MMadmServ web interface. This flaw enables an attacker to execute arbitrary system commands remotely, potentially leading to full system compromise. The vulnerable component is the MMadmServ web interface. The vulnerability allows attackers to inject commands through a specific field.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

BDU:2026-02410

CVE-2026-22553

Produtos afetados

Insat Masterscada Buk-Ts

Referências · 12

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-055-01.json · Nota
• https://twitter.com/VulmonFeeds/status/2026468707086573618 · Publicação no Twitter
• https://t.me/CVEtracker/45658 · Publicação no Telegram
• https://twitter.com/offseq/status/2026409350714020187 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2026-02410 · Nota de Segurança
• https://twitter.com/kernyx64/status/2026545247073771540 · Publicação no Twitter
• https://twitter.com/infoflowcloud/status/2026642594864779718 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-22553 · Nota de Segurança
• https://twitter.com/CVEnew/status/2026641408686231739 · Publicação no Twitter
• https://cisa.gov/news-events/ics-advisories/icsa-26-055-01 · Nota
• https://twitter.com/CveTodo/status/2026409357634601276 · Publicação no Twitter
• https://t.me/cveNotify/153406 · Publicação no Telegram