CVE-2017-12694

High

Published: 25/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A Directory Traversal issue was discovered in SpiderControl SCADA Web Server. An attacker may be able to use a simple GET request to access system files.

Risk Assessment

This vulnerability may allow an attacker to access sensitive system files, potentially leading to further attacks on the infrastructure.

Recommendation

It is recommended to update the software to the latest version and implement appropriate security measures to minimize the risk of an attack.

Other vulnerabilities in SpiderControl SCADA Web Server

CVE-2017-12728High
An Improper Privilege Management issue was discovered in SpiderControl SCADA Web Server Version 2.02.0007 and prior. Authenticated, non-administrative local users are able to alter service executables with escalated privileges.

Original NVD description (English source)

A Directory Traversal issue was discovered in SpiderControl SCADA Web Server. An attacker may be able to use a simple GET request to perform a directory traversal into system files.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS