CVE-2024-22016 — Incorrect Permission Assignment for Critical Resource in Rapid SCADA

CVE-2024-22016

Incorrect Permission Assignment for Critical Resource in Rapid SCADA PUBLISHED

Description (CNA)

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may allow privilege escalation.

Affected (CNA)

Vendor / product	Versions
Rapid Software LLC / Rapid SCADA	affected 0 through 5.8.4

CWE

CWE-732

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03
https://rapidscada.org/contact/

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03
https://rapidscada.org/contact/

CISA-ADP

No English description supplied.

No references supplied.