CVEvulnerability
CVE-2023-3329
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-08-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
- Weaknesses
- CWE-22
Description
SpiderControl SCADA Webserver versions 2.08 and prior are vulnerable to path traversal. An attacker with administrative privileges could overwrite files on the webserver using the HMI's upload file feature. This could create size zero files anywhere on the webserver, potentially overwriting system files and creating a denial-of-service condition.
Affected configurations
• spidercontrol scadawebserver (<= 2.08)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-173-03 Third Party Advisory, US Government Resource
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-173-03 Third Party Advisory, US Government Resource