PatchTheCVEscada web server vulnerabilities and fixes
Recent CVEs affecting scada web server, with upgrade or downgrade steps. 5 tracked.
Also searched as: scadawebserver.
scada web server has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-08-25. Highest priority: CVE-2015-1001 (score 58/100).
- CVE-2017-12694 HIGH 7.5 MITIGATE A Directory Traversal issue was discovered in SpiderControl SCADA Web Server
- CVE-2015-1005 LOW 2.1 MITIGATE IniNet embeddedWebServer (aka eWebServer) before 2.02 for Windows CE uses cleartext for password storage, whic
- CVE-2015-1003 MEDIUM 5.0 MITIGATE Directory traversal vulnerability in IniNet embeddedWebServer (aka eWebServer) before 2.02 allows remote attac
- CVE-2015-1002 MEDIUM 6.4 MITIGATE IniNet embeddedWebServer (aka eWebServer) before 2.02 mishandles URL encoding, which allows remote attackers t
- CVE-2015-1001 HIGH 10.0 MITIGATE Multiple stack-based buffer overflows in IniNet embeddedWebServer (aka eWebServer) before 2.02 allow remote at
FAQ
How do I fix scada web server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is scada web server being exploited right now?
None of the tracked scada web server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which scada web server CVE should I patch first?
CVE-2015-1001 currently ranks highest (58/100): Multiple stack-based buffer overflows in IniNet embeddedWebServer (aka eWebServer) before 2.02 allow remote at.