CVE-2023-39458

Name of the Vulnerable Software and Affected Versions Triangle MicroWorks SCADA Data Gateway (affected versions not specified)

Description This issue allows network-adjacent attackers to bypass authentication on affected installations of Triangle MicroWorks SCADA Data Gateway. The specific flaw exists within the handling of certificates, where the service uses a hard-coded default SSL certificate. An attacker can leverage this vulnerability to bypass authentication on the system. The vulnerability is related to the use of hard-coded credentials in the SCADA system, which can allow a remote attacker to gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.