CVE-2023-39468: 
Triangle MicroWorks SCADA Data Gateway vulnerability analysis and mitigation

Triangle MicroWorks SCADA Data Gateway contains a remote code execution vulnerability (CVE-2023-39468) that affects the DbasSectorFileToExecuteOnReset parameter handling. The vulnerability was discovered in 2023 and allows authenticated remote attackers to execute arbitrary code on affected installations. The issue stems from an exposed dangerous function that could be exploited to execute code with SYSTEM privileges (ZDI Advisory).

The vulnerability exists within the handling of the DbasSectorFileToExecuteOnReset parameter in the SCADA Data Gateway. The specific flaw is classified as CWE-749 (Exposed Dangerous Method or Function). The vulnerability has been assigned a CVSS v3.0 base score of 7.2 (High) with the following vector: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating network accessibility, low attack complexity, high privileges required, no user interaction needed, and high impacts on confidentiality, integrity, and availability (ZDI Advisory).

A successful exploitation of this vulnerability allows an attacker to execute arbitrary code with SYSTEM level privileges on the affected system. This means an attacker could potentially gain complete control over the affected SCADA Data Gateway installation, compromising the security and integrity of the industrial control system (ZDI Advisory).

The vulnerability requires authentication for exploitation, meaning an attacker must have valid credentials to exploit the flaw. The attack complexity is rated as low, indicating that the vulnerability is relatively straightforward to exploit once authentication is achieved (ZDI Advisory).

Triangle MicroWorks has released an update to address this vulnerability. Users are advised to upgrade to the latest version of SCADA Data Gateway. The fix was included in version 5.02, which was released in March 2024 along with other security improvements including OpenSSL upgrades and improved security certificate handling (Triangle MicroWorks).