Unscored severity · published May 25, 2012
CVE-2012-1824
Untrusted search path vulnerability in Measuresoft ScadaPro Client before 4.0.0 and ScadaPro Server before 4.0.0 allows local users to gain privileges via a Trojan horse DLL in…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in Measuresoft ScadaPro Client before 4.0.0 and ScadaPro Server before 4.0.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Scadapro Client · Measuresoft
through 3.3.1 · source: NVD
SS
Scadapro Server · Measuresoft
through 3.3.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1824
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1824
www.measuresoft.net
http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Client/DOCUMENTATION/ReleaseNotes.doc
www.measuresoft.net
http://www.measuresoft.net/downloads/Measuresoft%20SCADA%204.4.6/issue_disks/Server/DOCUMENTATION/ReleaseNotes.doc
US Government Resource
http://www.us-cert.gov/control_systems/pdf/ICSA-12-145-01.pdf
More from Scadapro Client
7.8
CVE-2022-2897
Measuresoft ScadaPro Server and Client (All Versions) do not properly resolve links before file access; this could allow privilege escalation
5.5
CVE-2022-2898
Measuresoft ScadaPro Server and Client (All Versions) do not properly resolve links before file access; this could allow a denial-of-service condition