ZDI-23-1028: (Pwn2Own) Triangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation Vulnerability
First published: Fri Aug 04 2023(Updated: )
This vulnerability allows remote attackers to create arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Triangle MicroWorks SCADA Data Gateway |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of ZDI-23-1028?
The severity of ZDI-23-1028 is considered high due to its potential for remote attackers to create arbitrary files.
How do I fix ZDI-23-1028?
To fix ZDI-23-1028, update the Triangle MicroWorks SCADA Data Gateway to the latest version that addresses this vulnerability.
What type of authentication is affected by ZDI-23-1028?
ZDI-23-1028 affects the existing authentication mechanism, which can be bypassed by attackers.
Can ZDI-23-1028 be exploited without authentication?
No, ZDI-23-1028 requires authentication; however, the existing authentication can be bypassed.
What systems are affected by ZDI-23-1028?
ZDI-23-1028 affects installations of Triangle MicroWorks SCADA Data Gateway.
- collector/zdi-published
- alias/ZDI-CAN-20534
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-23-1028
- alias/CVE-2023-39460
- agent/software-canonical-lookup
- agent/references
- agent/severity
- agent/title
- agent/description
- agent/softwarecombine
- agent/event
- agent/tags
- agent/source
- vendor/triangle microworks
- canonical/triangle microworks scada data gateway