CVE-2024-21794— Open Redirect in Rapid SCADA
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-21794
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Open Redirect in Rapid SCADA
Source: NVD (National Vulnerability Database)
Vulnerability Description
In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can redirect users to malicious pages through the login page.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Rapid Software Rapid SCADA 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Rapid Software Rapid SCADA是Rapid Software公司的一个开源的工业自动化平台。 Rapid Software Rapid SCADA 5.8.4及之前版本存在输入验证错误漏洞，该漏洞源于允许攻击者通过login页面打开重定向将用户重定向到恶意网页。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Rapid Software LLC | Rapid SCADA | 0 ~ 5.8.4 | - |
II. Public POCs for CVE-2024-21794
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-21794
请登录查看更多情报信息。
Same Patch Batch · Rapid Software LLC · 2024-02-01 · 7 CVEs total
| CVE-2024-21764 | 9.8 CRITICAL | Use of Hard-Coded Credentials in Rapid SCADA |
| CVE-2024-21852 | 8.8 HIGH | Rapid SCADA Path Traversal |
| CVE-2024-22016 | 7.8 HIGH | Incorrect Permission Assignment for Critical Resource in Rapid SCADA |
| CVE-2024-22096 | 6.5 MEDIUM | Relative Path Traversal in Rapid SCADA |
| CVE-2024-21869 | 6.2 MEDIUM | Plaintext Storage of a Password in Rapid SCADA |
| CVE-2024-21866 | 5.3 MEDIUM | Generation of Error Message Containing Sensitive Information in Rapid SCADA |
IV. Related Vulnerabilities
Same product: Rapid SCADA
- CVE-2024-21866
Generation of Error Message Containing Sensitive Information - CVE-2024-21869
Plaintext Storage of a Password in Rapid SCADA - CVE-2024-21764
Use of Hard-Coded Credentials in Rapid SCADA - CVE-2024-22016
Incorrect Permission Assignment for Critical Resource in Rap - CVE-2024-22096
Relative Path Traversal in Rapid SCADA
Same vendor: Rapid Software LLC
- CVE-2024-21866
Generation of Error Message Containing Sensitive Information - CVE-2024-21869
Plaintext Storage of a Password in Rapid SCADA - CVE-2024-21764
Use of Hard-Coded Credentials in Rapid SCADA - CVE-2024-22016
Incorrect Permission Assignment for Critical Resource in Rap - CVE-2024-22096
Relative Path Traversal in Rapid SCADA
Same weakness: CWE-601
- CVE-2026-42350
Kargo: Open Redirect in UI OIDC Login Flow via redirectTo Qu - CVE-2026-42195
Unvalidated gitlab URL parameter redirects OAuth authorize s - CVE-2026-3318
Multiple vulnerabilities in Cradle e-commerce - CVE-2026-42259
Saltcorn: Open Redirect in `POST /auth/login` due to incompl - CVE-2026-6795
Open Redirect in DivvyDrive Information Technologies' DivvyD
V. Comments for CVE-2024-21794
No comments yet