CVE-2024-8232 PoC — iniNet Solutions SpiderControl SCADA Web Server Unrestricted Upload of File with Dangerous Type

Source

https://github.com/z3usx01/CVE-2024-8232

Associated Vulnerability

Title: iniNet Solutions SpiderControl SCADA Web Server Unrestricted Upload of File with Dangerous Type (CVE-2024-8232)
Description:SpiderControl SCADA Web Server has a vulnerability that could allow an attacker to upload specially crafted malicious files without authentication.

Description

SpiderControl SCADA Web Server File Upload Vulnerability

Readme


# CVE-2024-8232 – SpiderControl SCADA Web Server File Upload Vulnerability

##  Summary
SpiderControl SCADA Web Server is vulnerable to unauthenticated arbitrary file uploads, allowing attackers to upload malicious scripts (e.g., web shells) and gain remote code execution.

- **CVE ID**: CVE-2024-8232
- **Vendor**: iniNet Solutions GmbH
- **Affected Product**: SpiderControl SCADA Web Server
- **Impact**: Remote Code Execution
- **Exploit Type**: Unauthenticated File Upload

## ⚠ Disclaimer
This proof of concept is for educational purposes **only**. Do not use against systems without explicit authorization.

## 🛠️ Usage

```bash
python3 poc.py http://TARGET-IP upload.php shell.php

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →