Eaton Form 6 control and Idea/IdeaPLUS information disclosure vulnerabilities

Eaton Form 6 control and Idea/IdeaPLUS are both products of the American company Eaton. The former is a controller product that provides instant access to operations and quickly determines the status of equipment as well as finding equipment faults, while the latter is a set of relay protection...

Eaton's Cooper Devices Improper Ethernet Frame Padding Vulnerability

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on October 22, 2015, and is being released to the ICS-CERT web site. David Formby and Raheem Beyah of Georgia Tech have identified a vulnerability caused by an Institute of Electrical and Electronics Engineers IEEE...

CVE-2014-9196

Eaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number ISN values linearly, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value...

Code injection

Eaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number ISN values linearly, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value...

CVE-2014-9196

The CVE covers Eaton Cooper Power Systems ProView Form 6 control and Idea/IdeaPLUS relays with Ethernet, affected since ProView 4.0–5.0. The root cause is a predictable, linearly generated TCP initial sequence number (ISN), enabling remote attackers to spoof sessions and mount MitM attacks. ICS-C...

CVE-2014-9196 Eaton’s Cooper Power Series Form 6 Control and Idea/IdeaPlus Relays with Ethernet

Eaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number ISN values linearly, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN value...

Eaton Network Shutdown Module <= 3.21 - Remote PHP Code Injection

No description provided by source. !/usr/bin/env python Quick 'n' Dirty - Metasploit module didn't do it for me 2013 - Filip Waeytens - http://www.wsec.be Usage Example: $ python eaton.py 192.168.1.9 net user User accounts for \...

Eaton Network Shutdown Module 3.21 PHP Code Injection

!/usr/bin/env python Quick 'n' Dirty - Metasploit module didn't do it for me 2013 - Filip Waeytens - http://www.wsec.be Usage Example: $ python eaton.py 192.168.1.9 "net user" User accounts for \ ------------------------------------------------------------------------------- Guest LocalAdmin The...

Eaton Network Shutdown Module <= 3.21 - Remote PHP Code Injection

Exploit for php platform in category web applications !/usr/bin/env python Quick 'n' Dirty - Metasploit module didn't do it for me 2013 - Filip Waeytens - http://www.wsec.be Usage Example: $ python eaton.py 192.168.1.9 "net user" User accounts for \...

Eaton Network Shutdown Module 3.21 PHP Code Injection

Eaton Network Shutdown module versions 3.21 and below suffer from a remote PHP code injection vulnerability. This is a python exploit for a previously disclosed finding. !/usr/bin/env python Quick 'n' Dirty - Metasploit module didn't do it for me 2013 - Filip Waeytens - http://www.wsec.be Usage...

Eaton Network Shutdown Module 3.21 - Remote PHP Code Injection

Eaton Network Shutdown Module 3.21 - Remote PHP Code Injection !/usr/bin/env python Quick 'n' Dirty - Metasploit module didn't do it for me 2013 - Filip Waeytens - http://www.wsec.be Usage Example: $ python eaton.py 192.168.1.9 "net user" User accounts for \...

Eaton Network Shutdown Module 3.21 - Remote PHP Code Injection

!/usr/bin/env python Quick 'n' Dirty - Metasploit module didn't do it for me 2013 - Filip Waeytens - http://www.wsec.be Usage Example: $ python eaton.py 192.168.1.9 "net user" User accounts for \ ------------------------------------------------------------------------------- Guest LocalAdmin The...

Eaton MGE Network Shutdown Module Remote PHP Code Injection

A remote code execution vulnerability has been reported in Eaton MGE Network Shutdown Module...

Eaton Network Shutdown Module Arbitrary PHP Code Execution Vulnerability

Eaton Network Shutdown Module is prone to a remote PHP code-execution vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

Eaton Network Shutdown Module Detection

The remote web server is part of Network Shutdown Module, from Eaton Corporation formerly MGE Office Protection Systems. It is used to monitor UPS-protected computers and shut them down gracefully if AC power fails. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid6008...

Eaton Network Shutdown Module Default Administrator Credentials

The remote Eaton Network Shutdown Module install uses a default set of credentials to control access to its administrative functionality. With this information, an attacker can gain complete access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Eaton Network Shutdown Module view_list.php paneStatusListSortBy Parameter eval() Call Remote PHP Code Execution

The version of the Eaton Network Shutdown Module hosted on the remote web server does not sanitize user input to the 'paneStatusListSortBy' parameter of the 'viewlist.php' script before using it as part of a command to be executed via PHP's 'eval' function. An unauthenticated, remote attacker can...

Network Shutdown Module (sort_values) Remote PHP Code Injection

This module exploits a vulnerability in Eaton Network Shutdown Module version use exploit/multi/http/eaton/nsmcodeexec msf undefinednsmcodeexec show actions ...actions... msf undefinednsmcodeexec set ACTION msf undefinednsmcodeexec show options ...show and set options... msf undefinednsmcodeexec...

X-format Communications Protocol (XCP) Detection

The remote service supports the X-format Communications Protocol XCP, commonly used to monitor Eaton-/Powerware-branded UPSes. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid44329; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"X-format...

Code injection

Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via paneactionbutton.php, and then executing this action via execaction.php...