CVE-2015-0980

SCADA Engine BACnet OPC Server (BACnet OPC Server) before version 2.1.371.24 is affected by CVE-2015-0980 via a format-string vulnerability in the SOAP web interface (BACnOPCServer.exe). Exploitation could allow remote attackers to execute arbitrary code. The ICS-CERT advisory notes a fixed versi...

CVE-2015-0981

The SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to bypass authentication and read or write to arbitrary database fields via unspecified vectors...

CVE-2015-0981

SCADA Engine BACnet OPC Server prior to version 2.1.371.24 is affected by three vulnerabilities tied to the SOAP web interface: (1) CVE-2015-0981 Authentication bypass allowing remote read/write of database fields, (2) CWE-122 Heap-based Buffer Overflow, and (3) CWE-20 Improper Input Validation. ...

BACnet OPC Server Authentication Vulnerability

BACnet OPC Server provides data access, alerts, and access to event and historical data between OPC clients and BACnet-compatible devices. BACnet OPC Server has a security vulnerability that can be exploited by an attacker to insert, read, and delete arbitrary items in the database...

BACnet OPC Server Heap Buffer Overflow Vulnerability

BACnet OPC Server provides data access, alerts, and access to event and historical data between OPC clients and BACnet-compatible devices. BACnet OPC Server can trigger heap corruption when processing constructed packets and has a security vulnerability that can be exploited by attackers to cause...

BACnet/IP Device Object Detection

Binary data 7165.pasl...

BACnet-OPC-Client-Buffer-Overflow

After communicating via several emails with the vendor, sharing details about the vulnerability, as well as proof-of-concept code I also offered to send the exploit code for them to test themselves, it was clear that they weren't very interested in fixing the vulnerability. import sys import stru...

BACnet OPC Client 1.0.24 缓冲区溢出漏洞

No description provided by source...

BACnet OPC Client Buffer Overflow

No description provided by source. $Id: bacnetcsv.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

BACnet OPC Client Buffer Overflow Exploit

No description provided by source. !/usr/bin/python bacnet.py BACnet OPC Client Buffer Overflow Exploit Jeremy Brown 0xjbrown41-gmail-com Sept 2010 After communicating via several emails with the vendor, sharing details about the vulnerability, as well as proof-of-concept code I also offered to...

ICONICS WebHMI ActiveX Stack Overflow

No description provided by source. , , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' ='=. presents.. ICONICS WebHMI ActiveX Stack Overflow Vendor Link: http://www.iconics.com/ PDF:...

BACnet/IP Protocol Detection

Binary data 7110.pasl...

BACnet/IP Protocol Detection (SCADA)

Binary data 6726.prm...

bacnet-info NSE Script

Discovers and enumerates BACNet Devices collects device information based off standard requests. In some cases, devices may not strictly follow the specifications, or may comply with older versions of the specifications, and will result in a BACNET error response. Presence of this error positivel...

Scada Engine BACnet OPC Client SCADA Remote Code Execution (CVE-2010-4740)

A buffer overflow vulnerability has been reported in SCADA Engine's BACnet OPC Client. The vulnerability is due to a boundary check error. A remote attacker may exploit this issue by sending specially crafted malicious file to be opened using the affected product. Successful exploitation could...

Cimetrics BACnet Detection and Realm Information (deprecated)

Binary data 6730.prm...

BACnet Protocol Detection (deprecated)

Binary data 6727.prm...

BACnet Router Detection

Binary data 6728.prm...

TeeChart Professional ActiveX Control Trusted Integer Dereference

This module exploits an integer overflow in TeeChart Pro ActiveX control. When sending an overly large/negative integer value to the AddSeries property of TeeChart2010.ocx, the code will perform an arithmetic operation that wraps the value and is later directly trusted and called upon. This modul...

TeeChart Professional ActiveX Control 2010.0.0.3 - Trusted Integer Dereference (Metasploit)

$Id: teechartpro.rb 13522 2011-08-11 11:17:30Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...