CVE-2023-39461
Triangle MicroWorks SCADA Data Gateway Event Log Improper Output Neutralization For Logs Arbitrary File Write Vulnerability
- Published
- Updated
- Reserved
- Assigned by
- zdi
Description
Triangle MicroWorks SCADA Data Gateway Event Log Improper Output Neutralization For Logs Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to write arbitrary files on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of event logs. The issue results from improper sanitization of log output. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-20535.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| zdiCNA (assigner) | 3.0 | Medium4.4 | CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N |
| NVDNVD · Analyzed | 3.0 | Medium4.4 | CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N |
- EPSS (exploitation in 30 days)
- 1.3% · top 29% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.4.
Weakness
Affected products
Triangle MicroWorks · SCADA Data Gateway
- affected 5.1.3.20324
References (2)
- ZDI-23-1029 (opens in a new tab)x_research-advisoryx_transferred
- vendor-provided URL (opens in a new tab)vendor-advisoryx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-39461)Record last updated .