汇总 trihedral 相关全部产品的 CVE 与安全漏洞情报，包括 CVSS、EPSS、公开时间与漏洞情报数据。
已披露问题常与 路径处理缺陷、缓冲区溢出与跨站脚本 相关，可能在 软件部署与生产负载 场景中带来 应用崩溃与内存损坏 等暴露风险。
相关漏洞数据主要来源于公开漏洞披露与安全公告，可用于评估历史漏洞暴露面与修复优先级。
| CVE | 摘要 | 来源 | 最高 CVSS | EPSS % | 公开时间 | 更新时间 |
|---|---|---|---|---|---|---|
| CVE-2022-3181 | An Improper Input Validation vulnerability exists in Trihedral VTScada version 12.0.38 and prior. A specifically malformed HTTP request could cause the affected VTScada to crash. Both local area network (LAN)-only and internet facing systems are affected. | [email protected] | 7.5 | 0.66% | 2022-11-02 | 2026-06-17 |
| CVE-2017-14031 | An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. A local, non-administrator user has privileges to read and write to the file system of the target machine. | [email protected] | 7.8 | 0.29% | 2017-11-06 | 2026-06-16 |
| CVE-2017-14029 | An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior. The program will execute specially crafted malicious dll files placed on the target machine. | [email protected] | 7.8 | 0.93% | 2017-11-06 | 2026-06-16 |
| CVE-2017-6053 | A Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26. A cross-site scripting vulnerability may allow JavaScript code supplied by the attacker to execute within the user's browser. | [email protected] | 6.1 | 0.83% | 2017-06-21 | 2026-06-16 |
| CVE-2017-6045 | An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed within the web server application to unauthenticated users. These files may contain sensitive configuration information. | [email protected] | 7.5 | 1.68% | 2017-06-21 | 2026-06-16 |
| CVE-2017-6043 | A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26. The client does not properly validate the input or limit the amount of resources that are utilized by an attacker, which can be used to consume more resources than are available. | [email protected] | 7.5 | 1.69% | 2017-06-21 | 2026-06-16 |
| CVE-2016-4532 | Directory traversal vulnerability in the WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to read arbitrary files via a crafted pathname. | [email protected] | 9.1 | 27.62% | 2016-06-09 | 2026-06-16 |
| CVE-2016-4523 KEV | The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via unspecified vectors. | [email protected] | 7.5 | 31.39% | 2016-06-09 | 2026-06-16 |
| CVE-2016-4510 | The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files via unspecified vectors. | [email protected] | 9.1 | 20.10% | 2016-06-09 | 2026-06-16 |
| CVE-2014-9192 | Integer overflow in Trihedral Engineering VTScada (formerly VTS) 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service (server crash) via a crafted request, which triggers a large memory allocation. | [email protected] | 7.8 | 2.69% | 2014-12-11 | 2026-06-16 |