CVEvulnerability
CVE-2012-1824
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-05-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Untrusted search path vulnerability in Measuresoft ScadaPro Client before 4.0.0 and ScadaPro Server before 4.0.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Affected configurations
• measuresoft scadapro client (<= 3.3.1)
• measuresoft scadapro server (<= 3.3.1)
References
- http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Client/DOCUMENTATION/ReleaseNotes.doc www.measuresoft.net
- http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Server/DOCUMENTATION/ReleaseNotes.doc www.measuresoft.net
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-01.pdf US Government Resource
- http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Client/DOCUMENTATION/ReleaseNotes.doc www.measuresoft.net
- http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Server/DOCUMENTATION/ReleaseNotes.doc www.measuresoft.net
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-01.pdf US Government Resource