CVE-2022-3263: Measuresoft Scadapro Server

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limited privileges to modify the service binary path and start malicious commands with SYSTEM privileges.

Affected products

• Measuresoft Scadapro Server: version 6.7 only

Published 2022-09-23. Last modified 2026-06-17.