CVE-2023-39457

The vulnerability (CWE-306) results from a complete omission of user authentication in the product's default configuration. An attacker remotely, without any credentials, can gain access to system functions that should be protected. This vulnerability can be directly exploited to execute arbitrary code in the context of the root account, meaning full control over the device.

An attacker can remotely execute arbitrary code with root privileges, gaining full control over the system — including the ability to modify data, disrupt industrial processes, and perform lateral movement in the OT/SCADA network.

Apply patches available from the manufacturer in accordance with the references (Triangle MicroWorks website — 'What's New' section for SCADA Data Gateway). Additionally, it is recommended to immediately implement network access controls (firewall, OT network segmentation) restricting access to the gateway only to authorized hosts.

Triangle MicroWorks SCADA Data Gateway — affects installations in the default configuration; specific versions indicated in the manufacturer's references