CVE-2023-3329
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
SpiderControl SCADA Webserver versions 2.08 and prior are vulnerable to path traversal. An attacker with administrative privileges could overwrite files on the webserver using the HMI's upload file feature.
Risk Assessment
This could lead to overwriting system files and creating a denial-of-service condition.
Recommendation
It is recommended to update the SpiderControl SCADA Webserver to the latest version to mitigate this vulnerability.
Original NVD description (English source)
SpiderControl SCADA Webserver versions 2.08 and prior are vulnerable to path traversal. An attacker with administrative privileges could overwrite files on the webserver using the HMI's upload file feature. This could create size zero files anywhere on the webserver, potentially overwriting system files and creating a denial-of-service condition.