LCDS LAquis SCADA Input Validation Error Vulnerability

LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. An input validation error vulnerability exists in LCDS LAquis SCADA version...

Triangle MicroWorks SCADA Data Gateway Type Obfuscation Vulnerability

Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle MicroWorks, Inc. A type confusion vulnerability exists in Triangle MicroWorks SCADA Data Gateway, which can be exploited by an attacker to execute arbitrary code...

The vulnerability of the SCADA system MasterSCADA, related to the operation of buffers in memory outside the system’s boundaries, allows a intruder to trigger an emergency termination of the program process.

The vulnerability of the SCADA system MasterSCADA relates to the execution of operations outside the buffer in memory, as well as the use of memory after it has been freed. Exploiting this vulnerability can allow an intruder to cause the program to terminate abnormally...

Multiple Siemens Products Input Validation Error Vulnerability (CNVD-2020-23038)

Siemens SIMATIC PCS 7 and SIMATIC WinCC are both products of Siemens, Germany.SIMATIC PCS 7 is a process control system.SIMATIC WinCC is an automated data acquisition and monitoring SCADA system. An input validation error vulnerability exists in multiple Siemens products and can be exploited by a...

Analysing the Attack Surface of an Industrial Data Acquisition Device

Introduction The Data Station Plus from Red Lion Controls was handed to me to analyse the attack surface. The device is designed to connect to SCADA data acquisition devices over Modbus, Profibus, etc. by Serial or Ethernet connection. Data is collected and recorded to a local compact flash card...

Honeywell Experion C300 Controller

Binary data 764916.prm...

Honeywell Experion C300 Controller

Binary data 764917.prm...

LCDS LAquis SCADA Buffer Overflow Vulnerability (CNVD-2019-28113)

LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. A buffer overflow vulnerability exists in LCDS LAquis SCADA version 4.3.1.71...

Siemens SIPLUS CPU 1211 C PLC Detection

Binary data 750105.prm...

CVE-2018-18881

A Denial of Service DOS issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can configure invalid network settings, stopping TCP based communications to the device. A physical factory rese...

CVE-2018-18882

The CVE-2018-18882 issue affects ControlByWeb X-320M-I with firmware v1.05, where a stored XSS vulnerability exists in setup.html. The root cause is improper input handling that allows an authenticated user to inject arbitrary script via the web interface. Impact per connected sources includes po...

CVE-2018-18881

CVE-2018-18881 affects ControlByWeb X-320M-I (firmware v1.05 and earlier). The issue is a Denial of Service caused by an authenticated user configuring invalid network settings, which stops TCP communications and requires a physical factory reset to recover. Red Hat and NVD entries corroborate th...

CVE-2018-18881

A Denial of Service DOS issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can configure invalid network settings, stopping TCP based communications to the device. A physical factory rese...

Yokogawa DAQWORX Detection (Windows SMB Login)

Detects the installed version of Yokogawa DAQWORX for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Yokogawa DAQManager Detection (Windows SMB Login)

Detects the installed version of Yokogawa DAQManager for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of theDAQ software protection component of Cisco Firepower Threat Defense allows a intruder to trigger a service failure.

The vulnerability of the Cisco Firepower Threat Defense software’sDAQ component exists due to errors in resource management during traffic inspection. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Advantech WebAccess/SCADA Authorization Issue Vulnerability (CNVD-2019-32480)

Advantech WebAccess/SCADA is a set of SCADA software from Advantech based on browser architecture. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. An authorization issue vulnerability exists in Advante...

Race condition

A vulnerability in the data acquisition DAQ component of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access control policies or cause a denial of service DoS condition. The vulnerability exists because the affected software...

CVE-2019-1669

A vulnerability in the data acquisition DAQ component of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access control policies or cause a denial of service DoS condition. The vulnerability exists because the affected software...

CVE-2019-1669 Cisco Firepower Threat Defense Software Packet Inspection and Enforcement Bypass Vulnerability

A vulnerability in the data acquisition DAQ component of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access control policies or cause a denial of service DoS condition. The vulnerability exists because the affected software...