CVE-2023-2187: Medium severity triangle microworks scada data gateway vulnerability
On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send broadcast events to any user via the WebMonitor.An unauthenticated user can use this vulnerability to forcefully log out of any currently logged-in user by sending a "password change event". Furthermore, an attacker could use this vulnerability to spam the logged-in user with false events.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-2187?
CVE-2023-2187 is classified as a high severity vulnerability due to its potential for unauthorized user session disruption.
How do I fix CVE-2023-2187?
To mitigate CVE-2023-2187, upgrade Triangle MicroWorks' SCADA Data Gateway to version 5.01.04 or later.
Who is affected by CVE-2023-2187?
CVE-2023-2187 affects users of Triangle MicroWorks' SCADA Data Gateway versions 5.01.03 and earlier.
What attacks can be performed using CVE-2023-2187?
An attacker can exploit CVE-2023-2187 to forcefully log out any currently logged-in user by sending a password change event.
Is authentication required to exploit CVE-2023-2187?
No, CVE-2023-2187 can be exploited by unauthenticated users.