Momen Eldawakhly

**Name of the Vulnerable Software and Affected Versions** Ignition SCADA applications (affected versions not specified) **Description** The issue concerns Ignition SCADA applications utilizing Python scripting for automation. A lack of security controls regarding Python library imports and execution allows for potentially dangerous operations. The Ignition service account possesses excessive system permissions. Uploading a malicious project file containing Python scripts with bind shell capabilities allows an authenticated administrator to execute code with SYSTEM-level privileges on Windows. Alternative code execution patterns could also lead to similar outcomes. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SDG Technologies PnPSCADA (affected versions not specified) **Description** The issue allows a remote attacker to attach various entities without requiring system authentication, potentially leading to unauthorized control, data manipulation, and access to sensitive information within the SCADA system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Franklin Fueling System EVO 550 (affected versions not specified) Franklin Fueling System EVO 5000 (affected versions not specified) **Description** The issue is related to a Path Traversal vulnerability that could allow an attacker to access sensitive files on the system. **Recommendations** For Franklin Fueling System EVO 550, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Franklin Fueling System EVO 5000, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** FFS Colibri (affected versions not specified) **Description** The issue allows a remote user to access files on the system, including files that contain login credentials for other users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ARDEREG Sistema SCADA Central versions 2.203 and prior **Description** The login page of the affected software is vulnerable to an unauthenticated blind SQL injection attack. This allows an attacker to manipulate the application's SQL query logic, potentially extracting sensitive information or performing unauthorized actions within the database. The vulnerability could lead to unauthorized access, data leakage, or disruption of critical industrial processes by executing arbitrary SQL queries through the login page. **Recommendations** For versions 2.203 and prior, consider temporarily restricting access to the login page until a patch is available. As a mitigation measure, restrict the ability to execute arbitrary SQL queries through the login page to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PnPSCADA (affected versions not specified) **Description** The PnPSCADA system is affected by a critical unauthenticated error-based PostgreSQL Injection vulnerability. This security flaw is present within the "hitlogcsv.jsp" endpoint, allowing unauthenticated attackers to engage with the underlying database seamlessly and passively. As a result, malicious actors could gain access to vital information, such as Industrial Control System (ICS) and OT data, alongside other sensitive records like SMS and SMS Logs. The unauthorized database access exposes compromised systems to potential manipulation or breach of essential infrastructure data. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the "hitlogcsv.jsp" endpoint to minimize the risk of exploitation. Additionally, limiting database privileges and monitoring database activity can help mitigate the risk of unauthorized access.

**Name of the Vulnerable Software and Affected Versions** SeowonIntech SWC 5100W WIMAX Bootloader version 1.18.19.0, HW version 0.0.7.0, and FW versions 1.11.0.1, 1.9.9.4 **Description** The issue allows attackers to take over the system with root privilege by abusing the `doSystem()` function, enabling OS Command Injection. This allows for the execution of arbitrary system commands, potentially leading to a full system compromise. **Recommendations** For SeowonIntech SWC 5100W WIMAX Bootloader version 1.18.19.0, consider disabling the `doSystem()` function to prevent OS Command Injection until a patch is available. For HW version 0.0.7.0, restrict access to the system to minimize the risk of exploitation. For FW versions 1.11.0.1 and 1.9.9.4, avoid using the vulnerable `doSystem()` function in critical operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Franklin Fueling System FFS Colibri version 1.9.22.8925 **Description** The issue allows an attacker to overwrite system files, such as `system.conf` and `passwd`, due to the insecure usage of the `fopen` system function with the mode `wb`, which allows overwriting files if they exist. This can enable an attacker to escalate privileges by planting a backdoor user with root privilege or changing the root password. **Recommendations** For Franklin Fueling System FFS Colibri version 1.9.22.8925, consider disabling the use of the `fopen` system function with the mode `wb` until a patch is available to prevent the overwriting of system files. Restrict access to sensitive files such as `system.conf` and `passwd` to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** pyscriptjs (aka PyScript Demonstrator) versions through 2022-05-04 **Description** The issue allows a remote user to read Python source code. **Recommendations** For versions through 2022-05-04, at the moment, there is no information about a newer version that contains a fix for this vulnerability.