Filtered by vendor Spidercontrol Subscriptions
Filtered by product Scada Webserver Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-18991 1 Spidercontrol 1 Scada Webserver 2024-11-21 N/A
Reflected cross-site scripting (non-persistent) in SCADA WebServer (Versions prior to 2.03.0001) could allow an attacker to send a crafted URL that contains JavaScript, which can be reflected off the web application to the victim's browser.
CVE-2017-12728 1 Spidercontrol 1 Scada Webserver 2024-11-21 7.8 High
An Improper Privilege Management issue was discovered in SpiderControl SCADA Web Server Version 2.02.0007 and prior. Authenticated, non-administrative local users are able to alter service executables with escalated privileges, which could allow an attacker to execute arbitrary code under the context of the current system services.
CVE-2024-8232 1 Spidercontrol 1 Scada Webserver 2024-09-12 7.5 High
SpiderControl SCADA Web Server has a vulnerability that could allow an attacker to upload specially crafted malicious files without authentication.