← Back

CVE-2022-25359

nvd nist
Published: Feb 26, 2022Modified: Jun 17, 2026

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Exploitability: 3.9 / Impact: 5.2
Source: NVD

Description

On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files.

Affected (11)

Iclinks
2 products
Scadaflex Ii Firmware
Weblib
Configuration A
11 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Iclinks
Scadaflex Ii Firmware
Version 1.01.01
Scadaflex Ii Firmware
Version 1.01.14
Scadaflex Ii Firmware
Version 1.02.01
Scadaflex Ii Firmware
Version 1.02.15
Scadaflex Ii Firmware
Version 1.02.20
Scadaflex Ii Firmware
Version 1.03.07
Iclinks
Weblib
Version 1.13
Weblib
Version 1.14
Weblib
Version 1.16
Weblib
Version 1.22
Weblib
Version 1.24
Running on/withPlatform Versions
Iclinks
Scadaflex Ii
All versions

Related CWEs

CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (4)

Source: cve@mitre.org
ProductVendor Advisory
Source: cve@mitre.org
ExploitThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
ProductVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party AdvisoryVDB Entry

Timeline

No history available yet.