CVE-2012-1812: Exposure of Sensitive Information to an Unauthorized Actor

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to obtain sensitive cleartext information via a session on TCP port 12000...

PT-2012-3558

Name of the Vulnerable Software and Affected Versions EOScada versions prior to 11.0.19.2 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon restart, by sending data to specific TCP ports. Recommendations For versions prior to 11.0.19.2, update to...

PT-2012-3559

Name of the Vulnerable Software and Affected Versions C3-ilex EOScada versions prior to 11.0.19.2 Description The issue allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 24006. Recommendations For versions prior to 11.0.19.2, update to version...

CVE-2012-1810: Undefined Security Weakness

EOSCoreScada.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service daemon restart by sending data to TCP port 1 5050 or 2 24004...

CVE-2012-1813: Undefined Security Weakness

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 12000...

CVE-2012-1811: Undefined Security Weakness

EOSDataServer.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 24006...

C3-ilex EOScada Multiple Vulnerabilities

Overview This Advisory is a follow-up release to the original Advisory which was posted to the US-CERT secure Portal library October 08, 2012. Dale Peterson of Digital Bond has identified multiple vulnerabilities in the C3-ilex’s EOScada application that can result in data leakage and a...