Getshell can be used for a large-scale universal SCADA System (water, heat gas, and GPRS) (No Logon is required/the impact on major provinces)

Getshell can be used for a large-scale universal SCADA System (water, heat gas, and GPRS) (No Logon is required/the impact on major provinces)

**. **: 82/Zaozhuang heat

Unauthorized access exists in the alarm Area

**. **: 82/Alarm/dlgAlarmConfirm. aspx

In addition, you can directly upload shell files without any restrictions on the upload process.

**. **: 82/Water Affairs

**. **: 82/Alarm/dlgAlarmConfirm. aspx

 

 

Case

**. **: 82/Alarm/dlgAlarmConfirm. aspx Wuhan GPRS Remote Monitoring System

**. **: 8080/Alarm/dlgAlarmConfirm. aspx Taiyuan Iron and Steel

Http: // **. **: 83/Alarm/dlgAlarmConfirm. aspx remote Hydraulic System

**. **: 88/Alarm/dlgAlarmConfirm. aspx automatic energy metering data statistics system

Http: // **. **: 93/Alarm/dlgAlarmConfirm. aspx

**. **: 82/Alarm/dlgAlarmConfirm. aspx

Solution:

Restrict upload and control access