PT-2024-8683 · Unknown · Spidercontrol Scada Web Server

Published 2024-09-10 · Updated 2024-09-25 · CVE-2024-8232

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions SpiderControl SCADA Web Server (affected versions not specified)

Description The issue is related to the upload of specially crafted malicious files without authentication, which could allow an attacker to execute arbitrary code. The vulnerability is actively exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2024-10285

CVE-2024-8232

Affected Products

Spidercontrol Scada Web Server

References · 15

• https://bdu.fstec.ru/vul/2024-10285 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-8232 · Security Note
• https://twitter.com/transilienceai/status/1837660103350407272 · Twitter Post
• https://twitter.com/CveFindCom/status/1833597117077545303 · Twitter Post
• https://t.me/cvedetector/5300 · Telegram Post
• https://twitter.com/CVEnew/status/1833594116673863734 · Twitter Post
• https://twitter.com/transilienceai/status/1836536651276857594 · Twitter Post
• https://twitter.com/transilienceai/status/1838025665184198823 · Twitter Post
• https://twitter.com/transilienceai/status/1834917468394889512 · Twitter Post
• https://twitter.com/transilienceai/status/1838932649911435635 · Twitter Post
• https://twitter.com/transilienceai/status/1838204675247509550 · Twitter Post
• https://twitter.com/transilienceai/status/1838590773891317983 · Twitter Post
• https://twitter.com/transilienceai/status/1837841001135644819 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-254-02 · Note
• https://twitter.com/transilienceai/status/1837173226004201859 · Twitter Post