ZDI-CAN-20797: ZDI-23-1034: Triangle MicroWorks SCADA Data Gateway get_config Missing Authentication Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Triangle MicroWorks SCADA Data Gateway. Authentication is not required to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-20797?
The severity of ZDI-CAN-20797 is considered high due to the potential for remote attackers to disclose sensitive information without authentication.
How do I fix ZDI-CAN-20797?
To fix ZDI-CAN-20797, it is recommended to apply the latest security updates provided by Triangle MicroWorks for the SCADA Data Gateway.
What type of information can be disclosed by exploiting ZDI-CAN-20797?
Exploiting ZDI-CAN-20797 can allow remote attackers to disclose sensitive information related to the configuration and operations of the SCADA Data Gateway.
Is authentication required to exploit ZDI-CAN-20797?
No, authentication is not required to exploit ZDI-CAN-20797, making it more dangerous for affected installations.
Which software is affected by ZDI-CAN-20797?
ZDI-CAN-20797 affects the Triangle MicroWorks SCADA Data Gateway.