Multiple Vulnerabilities in SIDIS Prime Before V4.0.700

An attacker with network access could exploit these vulnerabilities to gain unauthorized access to SIDIS Prime, potentially allowing modification of configuration or extraction of sensitive data from the system. Depending on how SIDIS Prime is integrated into your plant network, this could affect data integrity and system availability.

Water authorities and municipal utilities using SIDIS Prime for operational data management, process monitoring, or control system integration. This affects system administrators responsible for SCADA data management and engineering workstations that interface with process control systems.

An attacker on your network could send specially crafted requests to SIDIS Prime to exploit input validation flaws (CWE-20, CWE-400) or memory corruption issues (CWE-122, CWE-787, CWE-416). The attack does not require authentication or user interaction. Successful exploitation could allow the attacker to execute code, read sensitive data, or cause the application to crash.