CVE-2022-3263

Name of the Vulnerable Software and Affected Versions Measuresoft ScadaPro Server version 6.7

Description The issue is related to improper access control in the security descriptor of the SCADA server, which could allow a local user with limited privileges to modify the service binary path. This could enable an attacker to execute arbitrary commands with system privileges.

Recommendations For Measuresoft ScadaPro Server version 6.7, consider restricting access to the service binary path to prevent modification and limit the execution of malicious commands until a patch is available. As a temporary workaround, review and enforce strict access controls on the system to minimize the risk of exploitation.