SpiderControl SCADA Web Server Vulnerability Allows Unauthenticated File Upload
CVE-2024-8232

7.5HIGH

Key Information:

Vendor: Ininet Solutions Gmbh
Status: Spidercontrol Scada Web Server
Vendor: CVE Published:; 10 September 2024

🔔 Create Ininet Solutions Gmbh Vulnerability Alert

What is CVE-2024-8232?

The SpiderControl SCADA Web Server contains a vulnerability that allows attackers to upload specially crafted malicious files without any authentication. This security lapse can be exploited to compromise the integrity and availability of the SCADA system, potentially leading to unauthorized access and manipulation of sensitive operational data. To mitigate this risk, users should apply the latest patches and monitor their systems closely for unusual activity.

Affected Version(s)

SpiderControl SCADA Web Server 0

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-2...

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

None

Integrity:

High

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 10, 2024

Credit

elcazators ELEX FEIGONG RESEARCH INSTITUTE of Elex CyberSecurity, Inc reported this vulnerability to CERT/CC.