CVE-2024-10313CWE-22

iniNet Solutions SpiderControl SCADA PC HMI Editor Path Traversal

High · published October 24, 2024

CVSS v4.0
8.6
EPSS
1%
Percentile
42.0
In the wild
Unconfirmed
What it is

iniNet Solutions SpiderControl SCADA PC HMI Editor has a path traversal

vulnerability. When the software loads a malicious ‘ems' project

template file constructed by an attacker, it can write files to

arbitrary directories. This can lead to overwriting system files,

causing system paralysis, or writing to startup items, resulting in

remote control.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00500 · 42.0th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2024-10-24T17:41Z
EPSS history
Timeline
  • 24 OCT 17:41Z
    iniNet Solutions SpiderControl SCADA PC HMI Editor Path Traversal
    cvelistv5