critical9.1Public exploit code
CVE-2022-25359
On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ICL ScadaFlex II SCADA Controllers SC-1/SC-2 1.03.07 - Remote File CRUD2022-02-23 · remote · hardware
Impact
On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iclinks | Scadaflex Ii Firmware | Versions 1.01.01, 1.01.14, 1.02.01, 1.02.15, 1.02.20, 1.03.07 |
| Iclinks | Weblib | Versions 1.13, 1.14, 1.16, 1.22, 1.24 |
Weakness classification
References
- NVD record
- CVE.org record
- http://files.iclinks.com/datasheets/Scadaflex%20II/Scadaflex%20SC-1%20&%20SC-2_A1_compressed.pdf
- https://packetstormsecurity.com/files/166103/ICL-ScadaFlex-II-SCADA-Controllers-SC-1-SC-2-1.03.07-Remote-File-Modification.html
- http://files.iclinks.com/datasheets/Scadaflex%20II/Scadaflex%20SC-1%20&%20SC-2_A1_compressed.pdf
- https://packetstormsecurity.com/files/166103/ICL-ScadaFlex-II-SCADA-Controllers-SC-1-SC-2-1.03.07-Remote-File-Modification.html