Integer overflow in Trihedral Engineering VTScada (formerly VTS) 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service (server crash) via a crafted request, which triggers a large memory allocation.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vtscada | Trihedral | 6.5 (including) | 9.1.20 (excluding) |
| Vtscada | Trihedral | 10.0 (including) | 10.2.22 (excluding) |
| Vtscada | Trihedral | 11.0 (including) | 11.1.07 (excluding) |