CVE-2022-25359: Iclinks Scadaflex Ii Firmware

Critical severity, CVSS 9.1. EPSS: 37.3% chance of exploitation in the next 30 days.

On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files.

Affected products

• Iclinks Scadaflex Ii Firmware: version 1.01.01 only; version 1.01.14 only; version 1.02.01 only; version 1.02.15 only; version 1.02.20 only; version 1.03.07 only
• Iclinks Weblib: version 1.13 only; version 1.14 only; version 1.16 only; version 1.22 only; version 1.24 only

Published 2022-02-26. Last modified 2026-06-17.