controlsystemworks vulnerabilities

Products

• csworks 2

Latest controlsystemworks CVEs

Newest publication first

1. CVE-2014-2351 CSWorks SQL Injection

   Published 2014-05-20

   High·CVSS 7.5 EPSS 2.4%

   SQL injection vulnerability in the LiveData service in CSWorks before 2.5.5233.0 allows remote attackers to execute arbitrary SQL commands via vectors related to pathnames contained in web API requests.

2. CVE-2011-3996 The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service (service crash) via crafted TCP packets.

   Published 2011-11-03

   Medium·CVSS 5.0 EPSS 2.4%

   The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service (service crash) via crafted TCP packets.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.