PatchTheCVEvtscada vulnerabilities and fixes
Recent CVEs affecting vtscada, with upgrade or downgrade steps. 9 tracked.
vtscada has 9 tracked vulnerabilities, 2 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 7. Most recent: 2017-11-06. Highest priority: CVE-2016-4523 (score 81/100).
- CVE-2017-6053 MEDIUM 6.1 UPGRADE A Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26
- CVE-2017-6045 HIGH 7.5 UPGRADE An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26
- CVE-2017-6043 HIGH 7.5 UPGRADE A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26
- CVE-2017-14031 HIGH 7.8 UPGRADE An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior
- CVE-2017-14029 HIGH 7.8 UPGRADE An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior
- CVE-2016-4532 CRITICAL 9.1 DOWNGRADE Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x be
- CVE-2016-4523 HIGH 7.5 EXPLOITED UPGRADE Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability
- CVE-2016-4510 CRITICAL 9.1 DOWNGRADE The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers
- CVE-2014-9192 HIGH 7.8 UPGRADE Integer overflow in Trihedral Engineering VTScada (formerly VTS) 6.5 through 9.x before 9.1.20, 10.x before 10
FAQ
How do I fix vtscada vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is vtscada being exploited right now?
Yes: 1 vtscada CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which vtscada CVE should I patch first?
CVE-2016-4523 currently ranks highest (81/100): Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability.