What’s Vulnerable › Vulnerabilities
CVE-2024-10313: iniNet Solutions SpiderControl SCADA PC HMI Editor Path Traversal
- Severity: high (CVSS 8.0 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-10-24 · updated 2026-06-17
- Weakness: CWE-22
Description
iniNet Solutions SpiderControl SCADA PC HMI Editor has a path traversal vulnerability. When the software loads a malicious ‘ems' project template file constructed by an attacker, it can write files to arbitrary directories. This can lead to overwriting system files, causing system paralysis, or writing to startup items, resulting in remote control.
Affected products
- SpiderControl Scada Pc Hmi Editor: 8.10.00.00
References
Get alerted when CVE-2024-10313 or the next vulnerability affects your stack