PatchTheCVErapid scada vulnerabilities and fixes
Recent CVEs affecting rapid scada, with upgrade or downgrade steps. 8 tracked.
Also searched as: rapidscada.
rapid scada has 8 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 8. Most recent: 2024-09-22. Highest priority: CVE-2024-21764 (score 52/100).
- CVE-2024-47221 HIGH 7.5 UPGRADE CheckUser in ScadaServerEngine/MainLogic.cs in Rapid SCADA through 5.8.4 allows an empty password.
- CVE-2024-22096 MEDIUM 6.5 UPGRADE In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can append path traversal cha
- CVE-2024-22016 HIGH 7.8 UPGRADE In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to
- CVE-2024-21869 MEDIUM 6.2 UPGRADE In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product stores plaintext cre
- CVE-2024-21866 MEDIUM 5.3 UPGRADE In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product responds back with a
- CVE-2024-21852 HIGH 8.8 UPGRADE In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious config
- CVE-2024-21794 MEDIUM 5.4 UPGRADE In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can redirect users to malicio
- CVE-2024-21764 CRITICAL 9.8 UPGRADE In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials,
FAQ
How do I fix rapid scada vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rapid scada being exploited right now?
None of the tracked rapid scada CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rapid scada CVE should I patch first?
CVE-2024-21764 currently ranks highest (52/100): In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials, .