This may lead to the corruption of critical system files and the compromise of user data.
For those who upgrade from an earlier version of ScadaPro Server, the ActiveX control (ScadaControl.dll) may be removed from the application directory. When this happens, the application will crash while trying to launch the control. This can be solved by manually installing the ActiveX control by copying it from another project or by renaming the control.
ScadaPro Server (Versions 6.8.0.1 and later) does not use the ActiveX control anymore.
Version 7.0.0 of ScadaPro Server
The ScadaPro Server 7.0.0 release eliminates the need to install the ActiveX control, which may lead to the corruption of critical system files and the compromise of user data.
Therefore, if you upgrade from an earlier version of ScadaPro Server, you must rename the control in order for your application to continue working.
Version 6.8.0.0 - Discovered in August 2018
A vulnerability in ScadaPro Server that can lead to a denial of service has been discovered. A malicious user could exploit this vulnerability by sending a specially crafted packet which will cause the server to crash. This vulnerability was patched in version 6.8.0.1 and later releases of the application.
Digital Signatures
The company has made a digital signature available for the version of ScadaPro Server (6.8.0.1 and later) on .
In order to verify the signature, download the file from https://www.scadapro-solutions.com/support/download_file, select the file and click "Verify".
ScadaPro Server (Versions 5.x and earlier) does not support ActiveX controls
The ActiveX control (ScadaControl.dll) is still used by the application. Version 5.x and earlier versions of ScadaPro Server will try to load the ActiveX control if it's available on the target machine, but they do not support it anymore.
Update III: ScadaPro Server (Versions 6.4.0.1 and later) does not use the ActiveX control anymore .
For those who are upgrading from an earlier version of ScadaPro Server, the ActiveX control (ScadaControl.dll) may be removed from the application directory. When this happens, the application will crash while trying to launch the control. This can be fixed by manually installing the ActiveX control by copying it from another project or by renaming the control.
Timeline
Published on: 08/31/2022 21:15:00 UTC
Last modified on: 09/02/2022 22:33:00 UTC