Rapid Scada
Vendor:
First CVE: Mar 8, 2018 · Active for 8 years
11
Total CVEs
More Total CVEs than 90% of tracked products
2.8
Avg CVEs / Year
Higher CVE frequency than 78% of tracked products
7.1
Avg CVSS
Higher Avg CVSS than 46% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Rapid Scada over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 8, 2018
8 years ago
Most Recent CVE
Sep 22, 2024
674 days ago
CVE Severity & Scoring
Rapid Scada11 CVEs
45%
45%
9%
All CVEs353,240 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local4 (36.4%)
Network7 (63.6%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low11 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None9 (81.8%)
Unknown0 (0.0%)
Required2 (18.2%)
Privileges Required
Low7 (63.6%)
High0 (0.0%)
None4 (36.4%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-21764CRITICAL In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials, which may allow an attacker to connect to a specific port.
| Feb 2, 2024 | 9.8 | 26 | NO | NO |
CVE-2020-22722HIGH Rapid Software LLC Rapid SCADA 5.8.0 is affected by a local privilege escalation vulnerability in the ScadaAgentSvc.exe executable file. An attacker can obtain admin privileges by | Aug 14, 2020 | 7.8 | 25 | NO | NO |
CVE-2018-5313HIGH A vulnerability allows local attackers to escalate privilege on Rapid Scada 5.5.0 because of weak C:\SCADA permissions. The specific flaw exists within the access control that is s | Mar 8, 2018 | 7.8 | 25 | NO | NO |
CVE-2024-21852HIGH In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration file by utilizing a Zip Slip vulnerability in the unpacking ro | Feb 1, 2024 | 8.8 | 24 | NO | NO |
CVE-2024-22016HIGH In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada directory. This may allow privilege escalation.
| Feb 2, 2024 | 7.8 | 22 | NO | NO |
CVE-2024-47221HIGH CheckUser in ScadaServerEngine/MainLogic.cs in Rapid SCADA through 5.8.4 allows an empty password. | Sep 22, 2024 | 7.5 | 21 | NO | NO |
CVE-2022-44153MEDIUM Rapid Software LLC Rapid SCADA 5.8.4 is vulnerable to Cross Site Scripting (XSS). | Dec 7, 2022 | 6.1 | 21 | NO | NO |
CVE-2024-22096MEDIUM In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can append path traversal characters to the filename when using a specific command, allowing them t | Feb 2, 2024 | 6.5 | 17 | NO | NO |
CVE-2024-21869MEDIUM In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product stores plaintext credentials in various places. This may allow an attacker with local acce | Feb 2, 2024 | 5.5 | 17 | NO | NO |
CVE-2024-21866MEDIUM In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the affected product responds back with an error message containing sensitive data if it receives a specific ma | Feb 2, 2024 | 5.3 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (11 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (11 CVEs).
Media Mentions
Signals from CVEs in this product scope (11 CVEs).
Top CNAs Publishing CVEs For Rapid Scada
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 5.8.4 | 1 | 6.1 | 0.4% | 0 | 0 |
| 5.8.0 | 1 | 7.8 | 0.5% | 0 | 0 |
| 5.5.0 | 1 | 7.8 | 0.6% | 0 | 0 |