Product

controlsystemworks csworks vulnerabilities

2 published CVES affecting controlsystemworks csworks, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 2
Critical: 0
High: 1
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest controlsystemworks csworks CVEs

Newest publication first

CVE-2014-2351 CSWorks SQL Injection
Published 2014-05-20

HighCVSS 7.5 EPSS 2.4%

SQL injection vulnerability in the LiveData service in CSWorks before 2.5.5233.0 allows remote attackers to execute arbitrary SQL commands via vectors related to pathnames contained in web API requests.
CVE-2011-3996 The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service (service crash) via crafted TCP packets.
Published 2011-11-03

MediumCVSS 5.0 EPSS 2.4%

The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service (service crash) via crafted TCP packets.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

controlsystemworks csworks vulnerabilities

Latest controlsystemworks csworks CVEs

CVE-2014-2351 CSWorks SQL Injection

CVE-2011-3996 The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service (service crash) via crafted TCP packets.