ABB MicroSCADA contains a flaw related to the wserver.exe file passing user-supplied input to the CreateProcessA() function. The issue is triggered when handling a specially crafted request. This may allow a remote attacker to execute arbitrary code.
