Satel Netco Design
Monthly
Stored cross-site scripting in Satel Netco Design versions prior to v2.1.7 allows an authenticated user with Network Operator privileges to persist untrusted content that the application later renders without adequate neutralization, causing script execution in another user's browser when that content is viewed. Exploitation is a two-step chain: an attacker must already hold or compromise a privileged Network Operator account to plant the payload, and a separate user must subsequently open the affected page for the script to fire (CVSS 4.0 base 8.5 High; the independent assessment scores it CVSS 3.1 with scope change but only low confidentiality and integrity impact and no availability impact). No public exploit identified at time of analysis, and the issue is not listed as confirmed actively exploited (CISA KEV); the fix is to upgrade to v2.1.7 per the vendor advisory published through CISA ICS (ICSA-26-281-03).
Authenticated users holding only Viewer privileges on Satel Netco Design can degrade availability of the application by submitting specially crafted search input that drives excessive processing in the product's regular-expression handling. The issue affects all versions prior to v2.1.7 and is rated CVSS 7.1 (CVSS 4.0) / High under CVSS 3.1 for availability impact alone - there is no confidentiality or integrity loss. Exploitation requires a valid, low-privileged account and network reachability to the search functionality; no public exploit code has been identified at time of analysis and the flaw has not been confirmed actively exploited (CISA KEV).
Relative path traversal in Satel Netco Design versions prior to v2.1.7 lets an authenticated user holding only Viewer privileges write attacker-influenced files to any filesystem location reachable by the application service account, which can escalate to arbitrary code execution where a writable location is later executed or loaded by the service. The flaw affects the product's data export functionality (CWE-23) and is remotely reachable over the network, but requires a valid low-privileged account (CVSS 3.1 vector PR:L), so anonymous access is not sufficient. Rated 8.7 under CVSS 4.0 and reported through CISA ICS-CERT advisory ICSA-26-281-03; no public exploit code has been identified at time of analysis and the issue is not confirmed as actively exploited. The full RCE outcome is conditional on deployment-specific file-write-then-execute paths; absent those, impact is confined to unauthorized file creation or modification within application-accessible directories.
An authenticated user with Viewer privileges can exploit a relative path traversal flaw in the data import functionality of Satel Netco Design versions prior to v2.1.7 to probe file paths outside the intended import directory and use application responses as an existence oracle for files on the host system. The vulnerability is network-reachable (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N) but requires valid low-privilege credentials, and its impact is confined to low confidentiality loss via file-existence inference; it does not disclose file contents, allow writes, or enable code execution. No public exploit identified at time of analysis.
Stored cross-site scripting in Satel Netco Design versions prior to v2.1.7 allows an authenticated user with Network Operator privileges to persist untrusted content that the application later renders without adequate neutralization, causing script execution in another user's browser when that content is viewed. Exploitation is a two-step chain: an attacker must already hold or compromise a privileged Network Operator account to plant the payload, and a separate user must subsequently open the affected page for the script to fire (CVSS 4.0 base 8.5 High; the independent assessment scores it CVSS 3.1 with scope change but only low confidentiality and integrity impact and no availability impact). No public exploit identified at time of analysis, and the issue is not listed as confirmed actively exploited (CISA KEV); the fix is to upgrade to v2.1.7 per the vendor advisory published through CISA ICS (ICSA-26-281-03).
Authenticated users holding only Viewer privileges on Satel Netco Design can degrade availability of the application by submitting specially crafted search input that drives excessive processing in the product's regular-expression handling. The issue affects all versions prior to v2.1.7 and is rated CVSS 7.1 (CVSS 4.0) / High under CVSS 3.1 for availability impact alone - there is no confidentiality or integrity loss. Exploitation requires a valid, low-privileged account and network reachability to the search functionality; no public exploit code has been identified at time of analysis and the flaw has not been confirmed actively exploited (CISA KEV).
Relative path traversal in Satel Netco Design versions prior to v2.1.7 lets an authenticated user holding only Viewer privileges write attacker-influenced files to any filesystem location reachable by the application service account, which can escalate to arbitrary code execution where a writable location is later executed or loaded by the service. The flaw affects the product's data export functionality (CWE-23) and is remotely reachable over the network, but requires a valid low-privileged account (CVSS 3.1 vector PR:L), so anonymous access is not sufficient. Rated 8.7 under CVSS 4.0 and reported through CISA ICS-CERT advisory ICSA-26-281-03; no public exploit code has been identified at time of analysis and the issue is not confirmed as actively exploited. The full RCE outcome is conditional on deployment-specific file-write-then-execute paths; absent those, impact is confined to unauthorized file creation or modification within application-accessible directories.
An authenticated user with Viewer privileges can exploit a relative path traversal flaw in the data import functionality of Satel Netco Design versions prior to v2.1.7 to probe file paths outside the intended import directory and use application responses as an existence oracle for files on the host system. The vulnerability is network-reachable (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N) but requires valid low-privilege credentials, and its impact is confined to low confidentiality loss via file-existence inference; it does not disclose file contents, allow writes, or enable code execution. No public exploit identified at time of analysis.