GCVE - cpe:2.3:a:measuresoft:scadapro_server:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:measuresoft:scadapro_server:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Measuresoft (`3958c8ac-c57a-5a5a-aefc-d56df95f718d`)
Product	Scadapro Server (`5410aed8-abae-55a9-ba70-e5a9ec5a6569`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-3263`	vulnerable	2026-06-08 05:47:19.815712	Measuresoft ScadaPro Server Improper Access Control HIGH (7.8) The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limited privileges to modify the service binary path and start malicious commands with SYSTEM privileges. Published: 2022-09-23T18:30:36.700Z Updated: 2025-04-16T17:47:16.118Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-265-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2898`	vulnerable	2026-06-08 05:43:36.680455	Measuresoft ScadaPro Server and Client Link Following MEDIUM (6.1) Measuresoft ScadaPro Server and Client (All Versions) do not properly resolve links before file access; this could allow a denial-of-service condition. Published: 2022-08-31T20:54:55.611Z Updated: 2025-04-16T16:10:51.543Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-06	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2897`	vulnerable	2026-06-08 05:43:36.679682	Measuresoft ScadaPro Server and Client Link Following HIGH (7.8) Measuresoft ScadaPro Server and Client (All Versions) do not properly resolve links before file access; this could allow privilege escalation.. Published: 2022-08-31T20:54:55.020Z Updated: 2025-04-16T17:48:20.720Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-06	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2896`	vulnerable	2026-06-08 05:43:36.677631	Measuresoft ScadaPro Server Use After Free HIGH (7.8) Measuresoft ScadaPro Server (All Versions) allows use after free while processing a specific project file. Published: 2022-08-31T20:54:55.401Z Updated: 2025-04-16T17:48:01.170Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-06	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2895`	vulnerable	2026-06-08 05:43:36.677082	Measuresoft ScadaPro Server Stack-based Buffer Overflow HIGH (7.8) Measuresoft ScadaPro Server (All Versions) uses unmaintained ActiveX controls. These controls may allow two stack-based buffer overflow instances while processing a specific project file. Published: 2022-08-31T20:54:54.819Z Updated: 2025-04-16T17:48:31.475Z Open on db.gcve.eu Reference links https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-06	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2894`	vulnerable	2026-06-08 05:43:36.676673	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-2892`	vulnerable	2026-06-08 05:43:36.673875	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1824`	vulnerable	2026-06-08 05:00:51.050586	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.