EUVD-2014-5317

Malware in sbrugna...

Elipse SCADA DLL Hijacking Vulnerability

Elipse SCADA is a WEB-based SCADA system deployed in critical manufacturing, energy, hydro and other systems. The program suffers from a DLL hijacking vulnerability when loading a DLL pointing to a DLL named wfapi.dll, which could be exploited by an attacker to build a malicious application that,...

CVE-2014-5429

DNP Master Driver 3.02 and earlier in Elipse SCADA 2.29 build 141 and earlier, E3 1.0 through 4.6, and Elipse Power 1.0 through 4.6 allows remote attackers to cause a denial of service CPU consumption via malformed packets...

Code injection

DNP Master Driver 3.02 and earlier in Elipse SCADA 2.29 build 141 and earlier, E3 1.0 through 4.6, and Elipse Power 1.0 through 4.6 allows remote attackers to cause a denial of service CPU consumption via malformed packets...

CVE-2014-5429

DNP Master Driver 3.02 and earlier in Elipse SCADA 2.29 build 141 and earlier, E3 1.0 through 4.6, and Elipse Power 1.0 through 4.6 allows remote attackers to cause a denial of service CPU consumption via malformed packets...

CVE-2014-5429

CVE-2014-5429 affects the DNP Master Driver (V3.02 and earlier) used by Elipse SCADA, Elipse E3 (V1.0–V4.6), and Elipse Power (V1.0–V4.6). The root cause is handling of malformed DNP packets, leading to resource exhaustion and a denial of service (CPU consumption). Affected products can become un...

Elipse SCADA DNP3 Denial of Service

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on October 30, 2014, and is being released to the NCCIC/ICS-CERT web site Independent researchers Adam Crain and Chris Sistrunk have identified a DNP3 denial‑of‑service vulnerability in the Elipse SCADA application...