CVE-2020-10615: 
Triangle MicroWorks SCADA Data Gateway vulnerability analysis and mitigation

CVE-2020-10615 is a stack-based buffer overflow vulnerability affecting Triangle MicroWorks SCADA Data Gateway software versions 2.41.0213 through 4.0.122. The vulnerability was discovered by the Incite Team (Steven Seeley and Chris Anastasio) working with Trend Micro's Zero Day Initiative and was disclosed in April 2020. This vulnerability specifically affects installations with DNP3 Outstation channels and impacts critical infrastructure sectors including Energy, Water and Wastewater Systems worldwide (CISA Advisory, ZDI Advisory).

The vulnerability stems from improper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer, specifically in the handling of opcodes for GET_FILE_INFO. The vulnerability has been assigned a CVSS v3 base score of 9.8 (CRITICAL) with the vector string AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating it can be exploited remotely with low attack complexity and requires no privileges or user interaction (ZDI Advisory).

The successful exploitation of this vulnerability allows remote attackers to execute arbitrary code in the context of SYSTEM on affected installations of Triangle MicroWorks SCADA Data Gateway. The vulnerability can lead to complete system compromise, potentially affecting critical infrastructure operations (ZDI Advisory, CISA Advisory).

The vulnerability requires no authentication to exploit and can be triggered remotely. No known public exploits specifically targeting this vulnerability have been reported as of the advisory publication (CISA Advisory).

Triangle MicroWorks has released version 4.0.123 to address this vulnerability. CISA recommends users implement defensive measures including minimizing network exposure for control system devices, ensuring systems are not accessible from the Internet, locating control system networks behind firewalls, and isolating them from business networks. When remote access is required, secure methods such as VPNs should be used, with awareness that VPNs should be kept updated (CISA Advisory).