CVE-2023-39462: 
Triangle MicroWorks SCADA Data Gateway vulnerability analysis and mitigation

Triangle MicroWorks SCADA Data Gateway contains a workspace unrestricted upload vulnerability (CVE-2023-39462). This vulnerability was discovered and reported by Claroty Research - Team82 (Uri Katz, Noam Moshe, Vera Mens, Sharon Brizinov) and was disclosed on August 4, 2023. The vulnerability affects Triangle MicroWorks SCADA Data Gateway installations and allows remote attackers to upload arbitrary files, despite requiring authentication, as the existing authentication mechanism can be bypassed (Zero Day Initiative).

The vulnerability exists within the processing of workspace files and stems from the lack of proper validation of user-supplied data. The issue has been assigned a CVSS v3.0 base score of 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N), indicating a medium severity level. The specific flaw allows for the upload of arbitrary files, which can be leveraged in conjunction with other vulnerabilities to execute arbitrary code in the context of root (Zero Day Initiative).

When successfully exploited, this vulnerability allows attackers to upload arbitrary files to affected installations. More critically, when combined with other vulnerabilities, attackers can potentially execute arbitrary code with root privileges, giving them complete control over the affected system (Zero Day Initiative).

The vulnerability requires authentication to exploit, however, the existing authentication mechanism can be bypassed. The attack can be performed remotely, and when combined with other vulnerabilities, can lead to arbitrary code execution with root privileges (Zero Day Initiative).

Triangle MicroWorks has released an update to address this vulnerability. Users are advised to upgrade to the latest version of SCADA Data Gateway. The vendor has improved security and verification of files during workspace upload in version 5.01.02 and later (Triangle MicroWorks).