Skip to main content

SCADA CVE-2020-37143

HIGH
Allocation of Resources Without Limits or Throttling (CWE-770)
2026-02-05 disclosure@vulncheck.com
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

3
Analysis Generated
Mar 12, 2026 - 21:55 vuln.today
PoC Detected
Feb 05, 2026 - 20:47 vuln.today
Public exploit code
CVE Published
Feb 05, 2026 - 17:16 nvd
HIGH 7.5

DescriptionCVE.org

ProficySCADA for iOS 5.0.25920 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the password input field. Attackers can overwrite the password field with 257 bytes of repeated characters to trigger an application crash and prevent successful authentication.

AnalysisAI

ProficySCADA for iOS 5.0.25920 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the password input field. [CVSS 7.5 HIGH]

Technical ContextAI

This vulnerability (CWE-770: Allocation of Resources Without Limits or Throttling) ProficySCADA for iOS 5.0.25920 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the password input field. Attackers can overwrite the password field with 257 bytes of repeated characters to trigger an application crash and prevent successful authentication.

Affected ProductsAI

ProficySCADA for iOS 5.0.25920 contains a denial of service vulnerability that

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

More in SCADA

View all
CVE-2026-25895 CRITICAL POC
9.8 Feb 09

FUXA SCADA has a path traversal vulnerability — ninth critical vulnerability enabling arbitrary file access on SCADA ser

CVE-2019-25349 HIGH POC
7.5 Feb 18

ScadaApp for iOS 1.1.4.0 contains a denial of service vulnerability that allows attackers to crash the application by in

CVE-2026-22553 CRITICAL
9.8 Feb 24

OS command injection in InSAT MasterSCADA BUK-TS through MMadmServ web interface. Unauthenticated RCE on SCADA managemen

CVE-2026-21410 CRITICAL
9.8 Feb 24

SQL injection in InSAT MasterSCADA BUK-TS through the main web interface. ICS/SCADA system with unauthenticated SQL inje

CVE-2026-25893 CRITICAL
9.8 Feb 09

FUXA SCADA has yet another authorization bypass — now the seventh critical FUXA vulnerability discovered, enabling unaut

CVE-2026-25938 CRITICAL
9.8 Feb 09

FUXA SCADA has an authentication spoofing vulnerability from versions 1.2.8 through 1.2.10 — tenth critical vulnerabilit

CVE-2026-25894 CRITICAL
9.8 Feb 09

FUXA SCADA has insecure default configuration with a known JWT secret — eighth critical vulnerability.

CVE-2025-2523 CRITICAL
9.4 Jul 10

A remote code execution vulnerability in Honeywell Experion PKS and OneWireless WDM (CVSS 9.4). Critical severity with

CVE-2026-25752 CRITICAL
9.1 Feb 06

FUXA SCADA/HMI software has an additional authorization bypass vulnerability enabling unauthenticated access to industri

CVE-2026-25939 CRITICAL
9.1 Feb 09

FUXA SCADA has an eleventh critical vulnerability — missing authorization from versions 1.2.8 onward.

CVE-2025-1727 HIGH
8.1 Jul 10

CVE-2025-1727 is a critical vulnerability in RF-based remote linking protocols used for End-of-Train (EoT) and Head-of-T

CVE-2021-41579 HIGH
7.8 Oct 04

LCDS LAquis SCADA through 4.3.1.1085 is vulnerable to a control bypass and path traversal. Rated high severity (CVSS 7.8

Share

CVE-2020-37143 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy