CVE-2022-0369: 
Triangle MicroWorks SCADA Data Gateway vulnerability analysis and mitigation

Triangle MicroWorks SCADA Data Gateway contains a directory traversal vulnerability (CVE-2022-0369) that allows remote code execution. The vulnerability was discovered in the Restore Workspace feature and affects installations prior to version 5.01.02. Although authentication is required, the existing authentication mechanism can be bypassed (ZDI Advisory).

The vulnerability stems from improper validation of user-supplied paths in file operations within the Restore Workspace feature. This is classified as CWE-22 (Improper Limitation of a Pathname to a Restricted Directory). The vulnerability has been assigned a CVSS v3.0 base score of 7.2 HIGH (Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) (ZDI Advisory).

Successful exploitation of this vulnerability allows an attacker to execute arbitrary code with SYSTEM privileges on the affected system. This gives the attacker complete control over the SCADA Data Gateway installation (ZDI Advisory).

The vulnerability requires authentication to exploit, however, the existing authentication mechanism can be bypassed. The attack can be performed remotely, with low attack complexity (ZDI Advisory).

The vulnerability has been fixed in Triangle MicroWorks SCADA Data Gateway version 5.01.02. Users should upgrade to this version or later to mitigate the risk (ZDI Advisory).