Skip to content

Vendor

Supcon vulnerabilities

3 published CVES affecting Supcon, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
1
High
1
Medium
0
Low
1
Unscored
0
CISA KEV
0
Atom feed of Supcon alerts

Products

Latest Supcon CVEs

Newest publication first

  1. CVE-2023-4986 Supcon InPlant SCADA Project.xml unknown vulnerability

    Published
    LowCVSS 2.5

    A vulnerability classified as problematic was found in Supcon InPlant SCADA up to 20230901. Affected by this vulnerability is an unknown functionality of the file Project.xml. The manipulation leads to password hash with insufficient computational effort. Local access is required...

  2. CVE-2023-4985 Supcon InPlant SCADA Project.xml improper authentication

    Published
    HighCVSS 7.8

    A vulnerability classified as critical has been found in Supcon InPlant SCADA up to 20230901. Affected is an unknown function of the file Project.xml. The manipulation leads to improper authentication. An attack has to be approached locally. The exploit has been disclosed to the...

  3. CVE-2023-2924 Supcon SimField reportupload.aspx unrestricted upload

    Published
    CriticalCVSS 9.8

    A vulnerability, which was classified as critical, has been found in Supcon SimField up to 1.80.00.00. Affected by this issue is some unknown functionality of the file /admin/reportupload.aspx. The manipulation of the argument files[] leads to unrestricted upload. The attack may...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.