Modbus Protocol Command Execution

The vulnerability of the Modbus protocol implementation in the “Communication Server” software of the EKRASMS-SP suite for microprocessor-based EKRA 200 terminals exists due to insufficient filtering of symbols in file paths. Exploiting this vulnerability allows a malicious actor to execute...

ARM Reliezer Communication Server Virtual Memory Exhaustion

The vulnerability of the implementation of the interaction protocol between the “ARM Rielshchika” software and the “Server Connect” software of the EKRASMS-SP suite lies in the absence of restrictions on the size of the server list. Exploiting this vulnerability allows a malicious actor to exhaus...

PT-2019-3759

Name of the Vulnerable Software and Affected Versions ARM Relay software affected versions not specified Description The issue is related to errors in data type processing in the interaction protocol between the ARM Relay software and the Communication Server software of the EKRASMS-SP complex...

PT-2019-3757

Name of the Vulnerable Software and Affected Versions EKRASMS-SP terminal software affected versions not specified Description The issue exists due to insufficient filtering of characters in file paths in the Modbus protocol implementation of the "Сервер связи" software. This could allow a remote...