Triangle MicroWorks SCADA Data Gateway 事件日志目录遍历任意文件创建漏洞

该目录遍历漏洞允许攻击者在SCADA Data Gateway系统上创建任意文件，这可能导致系统配置被篡改、恶意代码被植入，甚至导致系统完全被控制。攻击者可以利用此漏洞访问敏感数据，例如配置信息、日志文件等。如果攻击者能够成功创建恶意文件，可能会导致系统崩溃、数据泄露或拒绝服务攻击。由于身份验证机制存在缺陷，攻击者更容易利用此漏洞，增加了安全风险。

Organizations utilizing Triangle MicroWorks SCADA Data Gateway in industrial control systems are at risk. This includes critical infrastructure sectors such as energy, water, and manufacturing. Systems with legacy configurations or those lacking robust access controls are particularly vulnerable. Shared hosting environments where multiple users share the same SCADA Data Gateway instance also face increased risk.

• linux / server: Monitor system logs (journalctl) for unusual file creation events in unexpected directories. Use auditd to track file access attempts.

auditctl -w /path/to/sensitive/directory -p wa -k directory_traversal

• generic web: Use curl to probe for directory traversal attempts.

curl 'http://scada-gateway/../../../../etc/passwd'

• windows / supply-chain: Monitor PowerShell logs for suspicious commands involving file creation or modification. Check Autoruns for unusual entries that could be related to the vulnerability.

1. 2024-05-03Disclosure

   disclosure

1. 已保留2023-08-02
2. 发布日期2024-05-03
3. 修改日期2024-08-02
4. EPSS 更新日期2026-04-02

虽然没有提供直接的升级修复版本，但可以采取一些缓解措施来降低风险。首先，应审查并加强SCADA Data Gateway的身份验证机制，确保其安全性。其次，可以配置防火墙或Web应用防火墙（WAF），以阻止对可能触发漏洞的文件的访问。此外，应定期审查系统日志，以检测任何可疑活动。如果升级不可行，建议实施严格的访问控制策略，限制对SCADA Data Gateway的访问权限。