CVE-2023-39464

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-39464
Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the configuration of the GTWWebMonitorService service. The path to the service executable contains spaces not surrounded by quotations. An attacker can leverage this vulnerability to execute arbitrary code in the context of root. Was ZDI-CAN-20538.

7.2 /10

CVSS v3 : HIGH

V3 Legend

Vector : AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.trianglemicroworks.com/products/scada-data-gateway/what's-new Release Notes
https://www.zerodayinitiative.com/advisories/ZDI-23-1032/ Third Party Advisory
https://www.trianglemicroworks.com/products/scada-data-gateway/what's-new Release Notes
https://www.zerodayinitiative.com/advisories/ZDI-23-1032/ Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:trianglemicroworks:scada_data_gateway:5.1.3.20324:*:*:*:*:*:*:*
History

17 Jun 2025, 21:03

Type Values Removed Values Added
CPE cpe:2.3:a:trianglemicroworks:scada_data_gateway:5.1.3.20324:*:*:*:*:*:*:*
First Time Trianglemicroworks
Trianglemicroworks scada Data Gateway
References () https://www.trianglemicroworks.com/products/scada-data-gateway/what's-new - () https://www.trianglemicroworks.com/products/scada-data-gateway/what's-new - Release Notes
References () https://www.zerodayinitiative.com/advisories/ZDI-23-1032/ - () https://www.zerodayinitiative.com/advisories/ZDI-23-1032/ - Third Party Advisory

21 Nov 2024, 08:15

Type Values Removed Values Added
Summary
  • (es) Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Vulnerabilidad de ejecución remota de código en ruta de búsqueda sin comillas. Esta vulnerabilidad permite a atacantes remotos ejecutar código en las instalaciones afectadas de Triangle MicroWorks SCADA Data Gateway. Aunque se requiere autenticación para aprovechar esta vulnerabilidad, se puede omitir el mecanismo de autenticación existente. La falla específica existe en la configuración del servicio GTWWebMonitorService. La ruta al ejecutable del servicio contiene espacios que no están entre comillas. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código arbitrario en el contexto de la raíz. Era ZDI-CAN-20538.
References () https://www.trianglemicroworks.com/products/scada-data-gateway/what's-new - () https://www.trianglemicroworks.com/products/scada-data-gateway/what's-new -
References () https://www.zerodayinitiative.com/advisories/ZDI-23-1032/ - () https://www.zerodayinitiative.com/advisories/ZDI-23-1032/ -

03 May 2024, 03:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-03 03:15

Updated : 2025-06-17 21:03

NVD link : CVE-2023-39464

Mitre link : CVE-2023-39464

CVE.ORG link : CVE-2023-39464

JSON object : View

Products Affected

trianglemicroworks

  • scada_data_gateway
CWE
CWE-428

Unquoted Search Path or Element