Back to CVE Browser

CVE-2012-1824

HIGH

7.2

CVSS Severity Score

EPSS Score0.1400%

EPSS Percentile26.82th

PublishedMay 25, 2012

Last ModifiedApr 29, 2026

Vulnerability Description

Untrusted search path vulnerability in Measuresoft ScadaPro Client before 4.0.0 and ScadaPro Server before 4.0.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Affected Platforms (CPE)

📦

Measuresoft

Scadapro Client

<= 3.3.1

📦

Measuresoft

Scadapro Server

<= 3.3.1

References & Advisories

🔗 http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Client/DOCUMENTATION/ReleaseNotes.doc

🔗 http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Server/DOCUMENTATION/ReleaseNotes.doc

🔗 http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-01.pdf

🔗 http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Client/DOCUMENTATION/ReleaseNotes.doc

🔗 http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Server/DOCUMENTATION/ReleaseNotes.doc

🔗 http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-01.pdf

Related Vulnerabilities

CVE-2012-280210.0

Unspecified vulnerability in the ac3_decode_frame function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8...

CVE-2012-280110.0

Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unkn...

CVE-2012-280010.0

Unspecified vulnerability in the ff_ivi_process_empty_tile function in libavcodec/ivi_common.c in FFmpeg before 0.11, and Libav 0....

CVE-2012-280310.0

Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0...