CVE-2024-10313

iniNet Solutions SpiderControl SCADA PC HMI Editor has a path traversal vulnerability. When the software loads a malicious ‘ems' project template file constructed by an attacker, it can write files to arbitrary directories. This can lead to overwriting system files, causing system paralysis, or writing to startup items, resulting in remote control.

• CWE-22

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-298-02

Published

Oct 24, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-10308The Jeg Elementor Kit plugin for WordPress is vulnerable to …5.4
• CVE-2024-10309The Tracking Code Manager WordPress plugin before 2.4.0 does…5.9
• CVE-2024-1031A vulnerability was found in CodeAstro Expense Management Sy…6.1
• CVE-2024-10310The Element Pack Elementor Addons (Header Footer, Template L…5.4
• CVE-2024-10311The External Database Based Actions plugin for WordPress is …8.8
• CVE-2024-10312The Exclusive Addons for Elementor plugin for WordPress is v…4.3
• CVE-2024-10314In Helix Core versions prior to 2024.2, an unauthenticated r…8.7
• CVE-2024-10315In Gliffy Online an insecure configuration was discovered in…6.9
• CVE-2024-10316The Stratum – Elementor Widgets plugin for WordPress is vuln…4.3
• CVE-2024-10318A session fixation issue was discovered in the NGINX OpenID …5.4
• CVE-2024-10319The 140+ Widgets | Xpro Addons For Elementor – FREE plugin f…4.3
• CVE-2024-1032A vulnerability classified as critical was found in openBI u…9.8