CVE-2023-39460: 
Triangle MicroWorks SCADA Data Gateway vulnerability analysis and mitigation

Triangle MicroWorks SCADA Data Gateway was found to contain a directory traversal vulnerability (CVE-2023-39460) that allows remote attackers to create arbitrary files on affected installations. The vulnerability was discovered and reported on February 22, 2023, and publicly disclosed on August 4, 2023. The affected product is the SCADA Data Gateway software from Triangle MicroWorks. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed (ZDI Advisory).

The vulnerability exists within the creation of event logs functionality. The specific flaw stems from the lack of proper validation of user-supplied paths prior to using them in file operations. The vulnerability has been assigned a CVSS score of 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), indicating a high severity level (ZDI Advisory).

An attacker who successfully exploits this vulnerability can leverage it in conjunction with other vulnerabilities to execute code in the context of root. The ability to create arbitrary files on the system can lead to system compromise and potential remote code execution (ZDI Advisory).

The vulnerability requires authentication to exploit, however, the existing authentication mechanism can be bypassed. The attack can be initiated remotely, and when combined with other vulnerabilities, can lead to code execution with elevated privileges (ZDI Advisory).

Triangle MicroWorks has issued an update to correct this vulnerability. Users are advised to upgrade to the latest version of the SCADA Data Gateway software (Triangle MicroWorks).