CVE-2023-39464: 
Triangle MicroWorks SCADA Data Gateway vulnerability analysis and mitigation

Triangle MicroWorks SCADA Data Gateway contains an unquoted search path vulnerability in the GTWWebMonitorService service (CVE-2023-39464). This vulnerability was discovered in February 2023 and publicly disclosed on August 4, 2023. The vulnerability affects the SCADA Data Gateway product and allows remote attackers to execute arbitrary code with root privileges, although authentication is required (ZDI Advisory).

The vulnerability exists within the configuration of the GTWWebMonitorService service. Specifically, the path to the service executable contains spaces that are not surrounded by quotations. The vulnerability has a CVSS score of 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), indicating high severity with network attack vector, low attack complexity, and requiring high privileges (ZDI Advisory).

An attacker who successfully exploits this vulnerability can execute arbitrary code in the context of root, potentially gaining complete control over the affected system. Although authentication is required, the existing authentication mechanism can be bypassed (ZDI Advisory).

The vulnerability requires network access and high privileges for exploitation, though the authentication mechanism can be bypassed. The vulnerability was demonstrated during a Pwn2Own competition (ZDI Advisory).

Triangle MicroWorks has released an update to address this vulnerability. Users are advised to upgrade to the latest version of SCADA Data Gateway (Triangle MicroWorks).