CVE-2024-21852 — Rapid SCADA Path Traversal

CVE-2024-21852

Rapid SCADA Path Traversal PUBLISHED

Description (CNA)

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration file by utilizing a Zip Slip vulnerability in the unpacking routine to achieve remote code execution.

Affected (CNA)

Vendor / product	Versions
Rapid Software LLC / Rapid SCADA	affected 0 through 5.8.4

CWE

CWE-22

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03
https://rapidscada.org/contact/

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03
https://rapidscada.org/contact/

CISA-ADP

No English description supplied.

No references supplied.