CVE-2020-10611

Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type confusion condition. Authentication is not required to exploit this vulnerability. Only applicable to installations using DNP3 Data Sets.

• CWE-843
• CWE-843

• https://www.us-cert.gov/ics/advisories/icsa-20-105-03Third Party Advisory, US Government Resource
• https://www.zerodayinitiative.com/advisories/ZDI-20-549/Third Party Advisory, VDB Entry
• https://www.us-cert.gov/ics/advisories/icsa-20-105-03Third Party Advisory, US Government Resource
• https://www.zerodayinitiative.com/advisories/ZDI-20-549/Third Party Advisory, VDB Entry

Published

Apr 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10606In OSIsoft PI System multiple products and versions, a local…7.8
• CVE-2020-10607In Advantech WebAccess, Versions 8.4.2 and prior. A stack-ba…8.8
• CVE-2020-10608In OSIsoft PI System multiple products and versions, a local…7.8
• CVE-2020-10609Grundfos CIM 500 v06.16.00 stores plaintext credentials, whi…7.5
• CVE-2020-1061A remote code execution vulnerability exists in the way that…8.8
• CVE-2020-10610In OSIsoft PI System multiple products and versions, a local…7.8
• CVE-2020-10612Opto 22 SoftPAC Project Version 9.6 and prior. SoftPACAgent …9.1
• CVE-2020-10613Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0…7.5
• CVE-2020-10614In OSIsoft PI System multiple products and versions, an auth…4.8
• CVE-2020-10615Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0…7.5
• CVE-2020-10616Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does …8.8
• CVE-2020-10617There are multiple ways an unauthenticated attacker could pe…7.5