Rapid Software LLC Rapid SCADA

Risk Summary

Successful exploitation of these vulnerabilities could result in an attacker reading sensitive files from the RapidScada server, writing files to the Scada directory (thus achieving code execution,) gaining access to sensitive systems via legitimate-seeming phishing attacks, connecting to the server and perfoming attacks using the high privileges of a service, obtaining administrator passwords, learning sensitive information about the internal code of the application, or achieving remote code execution.

CVEs (7)

Remediations

• Rapid Software did not respond to CISA's attempts at coordination. Users of RapidSCADA are encouraged to contact Rapid Software and keep their systems up to date.

Affected Vendors

Affected Products (1)

Affected Sectors

Energy, Transportation Systems