CVE-2014-8652

2014-11-1011:00:00

mitre

www.cve.org

AI Score

6.6

Confidence

High

EPSS

0.25

Percentile

96.7%

JSON

Elipse E3 3.x and earlier allows remote attackers to cause a denial of service (application crash and plant outage) via a rapid series of HTTP requests to index.html on TCP port 1681.

References

firebitsbr.wordpress.com/2014/07/16/vsla-security-advisory-fire-scada-dos-2013-001-http-dos-requests-flooding-crash-device-vulnerabilities-elipse-e3-scada-plc/

seclists.org/fulldisclosure/2014/Jul/69