GCVE - cpe:2.3:a:spidercontrol:scada_webserver:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:spidercontrol:scada_webserver:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Spidercontrol (`6b596561-052c-563e-958e-1b495559857c`)
Product	Scada Webserver (`35e6cbef-b59d-5e9e-a77b-28466c5d90a7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-8232`	vulnerable	2026-06-08 07:00:23.294563	iniNet Solutions SpiderControl SCADA Web Server Unrestricted Upload of File with Dangerous Type HIGH (7.5) SpiderControl SCADA Web Server has a vulnerability that could allow an attacker to upload specially crafted malicious files without authentication. Published: 2024-09-10T19:44:18.096Z Updated: 2024-09-12T13:36:10.295Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-24-254-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-18991`	vulnerable	2026-06-08 05:11:15.063914	Details available Reflected cross-site scripting (non-persistent) in SCADA WebServer (Versions prior to 2.03.0001) could allow an attacker to send a crafted URL that contains JavaScript, which can be reflected off the web application to the victim's browser. Published: 2018-12-04T21:00:00.000Z Updated: 2024-08-05T11:23:08.950Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/106105 https://ics-cert.us-cert.gov/advisories/ICSA-18-338-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-12728`	vulnerable	2026-06-08 05:08:47.519055	Details available An Improper Privilege Management issue was discovered in SpiderControl SCADA Web Server Version 2.02.0007 and prior. Authenticated, non-administrative local users are able to alter service executables with escalated privileges, which could allow an attacker to execute arbitrary code under the context of the current system services. Published: 2017-10-04T07:00:00.000Z Updated: 2024-08-05T18:43:56.611Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-17-250-01 http://www.securityfocus.com/bid/100668	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.