Trianglemicroworks Scada Data Gateway — known CVE vulnerabilities

Every CVE whose affected-product data names Trianglemicroworks Scada Data Gateway, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (22)

• CVE-2023-39457 — CVSS 9.8 (critical): Triangle MicroWorks SCADA Data Gateway Missing Authentication Vulnerability. This vulnerability allows remote attackers to bypass…
• CVE-2020-10611 — CVSS 9.8 (critical): Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary…
• CVE-2022-0369 — CVSS 8.8 (high): Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows…
• CVE-2023-2186 — CVSS 8.2 (high): On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message…
• CVE-2013-2793 — CVSS 7.8 (high): Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C…
• CVE-2023-39459 — CVSS 7.8 (high): Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote…
• CVE-2020-10613 — CVSS 7.5 (high): Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to disclose sensitive…
• CVE-2023-39465 — CVSS 7.5 (high): Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability. This vulnerability allows…
• CVE-2020-10615 — CVSS 7.5 (high): Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers cause a…
• CVE-2023-39468 — CVSS 7.2 (high): Triangle MicroWorks SCADA Data Gateway DbasSectorFileToExecuteOnReset Exposed Dangerous Function Remote Code Execution Vulnerability. This…
• CVE-2023-39460 — CVSS 7.2 (high): Triangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows…
• CVE-2023-39463 — CVSS 7.2 (high): Triangle MicroWorks SCADA Data Gateway Trusted Certification Unrestricted Upload of File Remote Code Execution Vulnerability. This…
• CVE-2023-39464 — CVSS 7.2 (high): Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability. This vulnerability…
• CVE-2023-39462 — CVSS 6.5 (medium): Triangle MicroWorks SCADA Data Gateway Workspace Unrestricted Upload Vulnerability. This vulnerability allows remote attackers to upload…
• CVE-2023-2187 — CVSS 5.3 (medium): On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send broadcast events to any user via the…
• CVE-2023-39458 — CVSS 5.3 (medium): Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows…
• CVE-2023-39467 — CVSS 5.3 (medium): Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability. This vulnerability allows remote attackers to…
• CVE-2023-39466 — CVSS 5.3 (medium): Triangle MicroWorks SCADA Data Gateway get_config Missing Authentication Information Disclosure Vulnerability. This vulnerability allows…
• CVE-2013-2794 — CVSS 4.9 (medium): Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C…
• CVE-2023-39461 — CVSS 4.4 (medium): Triangle MicroWorks SCADA Data Gateway Event Log Improper Output Neutralization For Logs Arbitrary File Write Vulnerability. This…
• CVE-2014-2342 — CVSS 4.3 (medium): Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service (excessive data processing)…
• CVE-2014-2343 — CVSS 1.2 (low): Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service (excessive data…