CVE-2023-2187

MediumCVSS 5.3

Published: 07/06/2023(UTC)Updated: 23/10/2026(UTC)Translated: 24/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.59%

48th percentile - higher than 48% of all known CVEs

Summary

On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send broadcast events to any user via the WebMonitor. This can forcefully log out any currently logged-in user by sending a "password change event" or spam the user with false events.

Risk Assessment

This could lead to disruption of user operations and potential operational paralysis through forced logouts or misinformation.

Recommendation

Update SCADA Data Gateway to a version later than v5.01.03 or apply mitigations recommended by the vendor.

Other vulnerabilities in SCADA Data Gateway

CVE-2023-2186High
On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message including format string characters to perform unrestricted memory reads. This can repeatedly crash the GTWWebMonitor.exe process to cause DoS, and an authenticated user can leverage the vulnerability to leak memory from the process, potentially leading to code execution.

Original NVD description (English source)

On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send broadcast events to any user via the WebMonitor.An unauthenticated user can use this vulnerability to forcefully log out of any currently logged-in user by sending a "password change event". Furthermore, an attacker could use this vulnerability to spam the logged-in user with false events.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS