Triangle MicroWorks SCADA Data Gateway
view advisory published 2020-04-14
These vulnerabilities allow remote attackers to execute arbitrary code and disclose on affected installations of Triangle Microworks SCADA Data Gateway with DNP3 Outstation channels. Authentication is not required to exploit these vulnerabilities.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-10615US | high7.5 | — | ||
Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers cause a denial-of-service condition due to a lack of proper vali… | ||||
| CVE-2020-10613US | high7.5 | — | ||
Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to disclose sensitive information due to the lack of proper vali… | ||||
| CVE-2020-10611US | critical9.8 | — | ||
Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary code due to the lack of proper validation o… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (3)
- MitigationSCADA Data Gateway
Triangle Microworks recommends users update to Version 4.0.123
- MitigationSCADA Data Gateway
Triangle Microworks recommends users update to Version 4.0.123
- MitigationSCADA Data Gateway
Triangle Microworks recommends users update to Version 4.0.123
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan