CVE-2022-2894

—

CVSS 3.1

7.8 high

EPSS

<1%p23

Published

Aug 31, 2022 (Aug 31, 2022)

Modified

Jun 17, 2026

Description

Measuresoft ScadaPro Server (All Versions) uses unmaintained ActiveX controls. The controls may allow seven untrusted pointer deference instances while processing a specific project file.

Vendors: measuresoft
Products: scadapro server
Weakness: CWE-822
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.