CVEブラウザに戻る

CVE-2012-1824

HIGH

7.2

CVSS Severity Score

EPSS Score0.1400%

EPSS Percentile26.82th

Published2012年5月25日

Last Modified2026年4月29日

Vulnerability Description

Untrusted search path vulnerability in Measuresoft ScadaPro Client before 4.0.0 and ScadaPro Server before 4.0.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

Affected Platforms (CPE)

📦

Measuresoft

Scadapro Client

<= 3.3.1

📦

Measuresoft

Scadapro Server

<= 3.3.1

References & Advisories

🔗 http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Client/DOCUMENTATION/ReleaseNotes.doc

🔗 http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Server/DOCUMENTATION/ReleaseNotes.doc

🔗 http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-01.pdf

🔗 http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Client/DOCUMENTATION/ReleaseNotes.doc

🔗 http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Server/DOCUMENTATION/ReleaseNotes.doc

🔗 http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-01.pdf

関連する脆弱性情報

CVE-2012-280210.0

Unspecified vulnerability in the ac3_decode_frame function in libavcodec/ac3dec.c in FFmpeg before 0.11 and Libav 0.8.x before 0.8...

CVE-2012-280010.0

Unspecified vulnerability in the ff_ivi_process_empty_tile function in libavcodec/ivi_common.c in FFmpeg before 0.11, and Libav 0....

CVE-2012-280110.0

Unspecified vulnerability in libavcodec/avs.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unkn...

CVE-2012-280310.0

Double free vulnerability in the mpeg_decode_frame function in libavcodec/mpeg12.c in FFmpeg before 0.11, and Libav 0.7.x before 0...