PT-2026-20524 · Unknown · Scadaapp For Ios

Luis Martinez · Published 2026-02-18 · Updated 2026-02-18 · CVE-2019-25349

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ScadaApp for iOS version 1.1.4.0

Description The application can be crashed by providing an oversized buffer in the Servername field during login. Specifically, inputting a 257-character buffer can trigger an application crash on iOS devices. The issue results in a denial of service. The vulnerable parameter is Servername.

Recommendations Update to a newer version of ScadaApp for iOS that addresses this issue. As a temporary workaround, limit the length of the input accepted in the Servername field during login to prevent the application from crashing.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2019-25349

Affected Products

Scadaapp For Ios

References · 5

• 🔥 https://exploit-db.com/exploits/47678 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25349 · Security Note
• https://vulncheck.com/advisories/scadaapp-for-ios-servername-denial-of-service · Note
• https://apps.apple.com/ca/app/scadaapp/id1206266634 · Note
• https://t.me/cveNotify/152437 · Telegram Post