ZDI-CAN-20509: ZDI-23-1026: (Pwn2Own) Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-20509?
The severity of ZDI-CAN-20509 is classified as critical due to the potential for network-adjacent attackers to bypass authentication.
How do I mitigate ZDI-CAN-20509?
To mitigate ZDI-CAN-20509, update to the latest version of the Triangle MicroWorks SCADA Data Gateway that includes the security fix.
What type of attacks could ZDI-CAN-20509 facilitate?
ZDI-CAN-20509 could facilitate unauthorized access to sensitive data and control over the SCADA system without proper authentication.
Who is affected by ZDI-CAN-20509?
Users of Triangle MicroWorks SCADA Data Gateway are affected by ZDI-CAN-20509.
Is authentication required to exploit ZDI-CAN-20509?
No, authentication is not required to exploit ZDI-CAN-20509, making it particularly dangerous.