PT-2023-3042 · Triangle Microworks · Scada Data Gateway

Philippe Laulheret · Published 2023-04-29 · Updated 2023-06-16 · CVE-2023-2187

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03

Description The issue is related to the lack of authentication for a critical function in the WebMonitor component of the SCADA Data Gateway. An unauthenticated attacker can send broadcast events to any user, allowing them to forcefully log out any currently logged-in user by sending a "password change event". Additionally, an attacker could use this vulnerability to spam logged-in users with false events. The vulnerability can be exploited by a remote attacker to bypass authentication procedures and potentially elevate privileges by sending specially crafted messages.

Recommendations For Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, consider disabling the WebMonitor component until a patch is available to prevent exploitation. Restrict access to the WebMonitor functionality to minimize the risk of unauthorized event sending. Avoid using the WebMonitor for critical operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2023-03107

CVE-2023-2187

Affected Products

Scada Data Gateway

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-2187 · Security Note
• https://bdu.fstec.ru/vul/2023-03107 · Security Note
• https://osv.dev/vulnerability/CVE-2023-2187 · Vendor Advisory
• https://vuldb.com/ru/?id.231000 · Note
• https://trellix.com/en-us/about/newsroom/stories/research/industrial-and-manufacturing-cves.html · Note
• https://github.com/advisories/GHSA-qp2h-3p7w-4v89 · Note