CVE-2020-10611: (Pwn2Own) Triangle MicroWorks SCADA Data Gateway DNP3 Type Confusion Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of data set elements. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.
Other sources
Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type confusion condition. Authentication is not required to exploit this vulnerability. Only applicable to installations using DNP3 Data Sets.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-10611?
CVE-2020-10611 is considered critical due to its ability to allow remote code execution without authentication.
How do I fix CVE-2020-10611?
To mitigate CVE-2020-10611, updated versions of Triangle MicroWorks SCADA Data Gateway should be installed to eliminate the vulnerability.
What versions of Triangle MicroWorks SCADA Data Gateway are affected by CVE-2020-10611?
CVE-2020-10611 affects versions of Triangle MicroWorks SCADA Data Gateway from 2.41.0213 up to 4.0.122.
Can CVE-2020-10611 be exploited without user authentication?
Yes, CVE-2020-10611 can be exploited by remote attackers without the need for user authentication.
What kind of attacks can be executed via CVE-2020-10611?
CVE-2020-10611 allows attackers to execute arbitrary code, potentially compromising system integrity and data.