CVE-2022-2892: Measuresoft Scadapro Server

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Measuresoft ScadaPro Server (Versions prior to 6.8.0.1) uses an unmaintained ActiveX control, which may allow an out-of-bounds write condition while processing a specific project file.

Affected products

• Measuresoft Scadapro Server: before 6.8.0.1 (fixed in 6.8.0.1)

Published 2022-08-31. Last modified 2026-06-17.