1824 matches found
SA136 : OpenSSH Vulnerabilities
SUMMARY Blue Coat products using affected versions of OpenSSH are susceptible to several vulnerabilities. A remote attacker, with access to the management interface, can exploit these vulnerabilities to enumerate existing user accounts and cause denial of service through excessive CPU consumption...
German Industrial Giant Victim of Cyber Espionage
German industrial conglomerate ThyssenKrupp disclosed last week that technical trade secrets were stolen in a cyberattack that dates back to February. Adversaries, ThyssenKrupp said, engaged in “organized, highly professional hacker activities” and launched their attack from the Southeast Asian...
Design flaws in Microprocessor remote control smart lock system
Microprocessor remote control smart lock system is a smart card identification including proximity card, IC card, TM card, etc.. A design vulnerability exists in the Microprocessor Remote Control Lock Smart Lock System when used in conjunction with the Microprocessor WG2082 Mobile APP Door Lock...
SA135 : OpenSSL Vulnerabilities 10-Nov-2016
SUMMARY Blue Coat products using affected versions of OpenSSL are susceptible to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to cause denial of service and obtain SSL/TLS session key information. AFFECTED PRODUCTS The following products are vulnerable: Director -...
Honeywell Experion PKS Denial of Service Vulnerability
Honeywell EPKS for automation and control of industrial and manufacturing processes are distributed control system solutions, including Web-based SCADA systems. A denial of service vulnerability exists in Honeywell Experion PKS. An attacker could exploit this vulnerability to trigger a denial of...
Kabona AB WDC Brute Force Decryption Vulnerability
Kabona AB WDC is a web-based SCADA system from the Swedish company Kabona AB. A security vulnerability exists in Kabona AB WDC versions prior to 3.4.0, which stems from the program failing to limit the number of authentication attempts. An attacker could exploit this vulnerability to conduct a...
SA131 : TCP Session Hijacking in Operating Systems Supporting RFC 5961
SUMMARY Blue Coat products that include a vulnerable version of an operating system that supports RFC 5961 are susceptible to a TCP session hijacking vulnerability. A remote, off-path attacker can infer the sequence numbers of an existing TCP connection, and either reset the connection or inject...
CVE-2016-5645
Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a hardcoded SNMP community, which makes it easier for remote attackers to load arbitrary firmware updates by leveraging knowledge of this community...
Undocumented SNMP String Exposes Rockwell PLCs to Remote Attacks
An undocumented SNMP community string has been discovered in programmable logic controllers PLCs built by Allen-Bradley Rockwell Automation that exposes these devices deployed in a number of critical industries to remote attacks. Researchers at Cisco Talos today said the vulnerability is in the...
FireEye released the report: to date there is still 3 3% of industrial control system vulnerabilities have not been fixed-bug warning-the black bar safety net
! Recently, the United States well-known network security company FireEye（fireeye released a survey report. The report stated: in the past 1 5 years, the worldwide total found by 1, 5 0 0 more than one industrial control system（ICS）vulnerabilities; and now, there are still some vulnerabilities do...
Siemens SINEMA Server Privilege Escalation Vulnerability (Update A)
OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-215-02 Siemens SINEMA Server Privilege Escalation Vulnerability that was published August 2, 2016, on the NCCIC/ICS-CERT web site. --------- Begin Update A Part 1 of 2 -------- Security researcher rgod working...
Beckhoff Embedded PC Images and TwinCAT Components Vulnerabilities
OVERVIEW Gregor Bonney from FH Aachen University of Applied Sciences has identified vulnerabilities in Beckhoff’s Embedded PC Images and TwinCAT Components. He published them and reported them to Beckhoff afterward. In 2014, Beckhoff produced a new build and security advisories with instructions ...
Simatic PCS 7 Data Compromise
The vulnerability exists in the implementation of the Web Navigator interface in Siemens WinCC, due to the presence of a strictly encrypted user account. Exploiting this vulnerability allows malicious actors, operating remotely, to gain access to the system through a specially crafted request...
Siemens ICS present in the device security validation vulnerability-vulnerability warning-the black bar safety net
! Recently,the German company Siemens to inform the user,due to ICSindustrial control systemdevice there is a security vulnerability,don't be networked use. The U.S. industrial control system computer Emergency Response TeamICS-CERTrecently said,in Siemens SIMATIC WinCCWindows Control...
Wireshark CoSine File Parser Heap Buffer Overflow Vulnerability
Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A heap buffer overflow vulnerability exists in Wireshark's CoSine file parser. A remote...
The plant controller has a remote vulnerability and no patch-vulnerability warning-the black bar safety net
Power station use of an industrial control system has not patched the vulnerability, an attacker can remotely exploit it to gain network control. Remedy method? Turning off the function or replace the equipment. Power station use of an industrial control system has not patched the vulnerability, ...
IRONGATE ICS Malware: Nothing to See Here...Masking Malicious Activity on SCADA Systems
In the latter half of 2015, the FireEye Labs Advanced Reverse Engineering FLARE team identified several versions of an ICS-focused malware crafted to manipulate a specific industrial process running within a simulated Siemens control system environment. We named this family of malware IRONGATE...
[SECURITY] Fedora 24 Update: subversion-1.9.4-1.fc24
Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...
SA123 : OpenSSL Vulnerabilities 3-May-2016
SUMMARY Blue Coat products using affected versions of OpenSSL are susceptible to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to intercept and decrypt TLS sessions, obtain arbitrary data from the target's memory stack, or execute arbitrary code through buffer...
