Advantech WebAccess bwocxrun.ocx OpenUrlToBufferTimeout方法任意文件访问漏洞

CVE ID:CVE-2014-0772 Advantech WebAccess HMI/SCADA是一款HMI/SCADA软件。 Advantech WebAccess BWOCXRUN.BwocxrunCtrl.1 ActiveX控件bwocxrun.ocx中的OpenUrlToBufferTimeout方法存在安全漏洞，由于程序不正确对'file://' URL进行校验，允许攻击者访问任意文件。 0 Advantech WebAccess 7.1 Advantech WebAccess 7.2版本已修复该漏洞，建议用户下载使用：...

Advantech WebAccess AccessCode参数处理栈缓冲区溢出漏洞

CVE ID:CVE-2014-0767 Advantech WebAccess HMI/SCADA是一款HMI/SCADA软件。 Advantech WebAccess处理AccessCode参数时不正确过滤用户输入，允许远程攻击者利用漏洞提交特殊参数触发基于栈的缓冲区溢出，可使应用程序崩溃或执行任意代码。 0 Advantech WebAccess 7.1 Advantech WebAccess 7.2版本已修复该漏洞，建议用户下载使用： http://webaccess.advantech.com/...

Advantech WebAccess odeName2参数处理栈缓冲区溢出漏洞

CVE ID:CVE-2014-0766 Advantech WebAccess HMI/SCADA是一款HMI/SCADA软件。 Advantech WebAccess处理odeName2参数时不正确过滤用户输入，允许远程攻击者利用漏洞提交特殊参数触发基于栈的缓冲区溢出，可使应用程序崩溃或执行任意代码。 0 Advantech WebAccess 7.1 Advantech WebAccess 7.2版本已修复该漏洞，建议用户下载更新： http://webaccess.advantech.com/...

Advantech WebAccess bwocxrun.ocx任意文件访问漏洞

CVE ID:CVE-2014-0771 Advantech WebAccess HMI/SCADA是一款HMI/SCADA软件。 Advantech WebAccess BWOCXRUN.BwocxrunCtrl.1 ActiveX控件bwocxrun.ocx中的OpenUrlToBuffer方法存在安全漏洞，由于程序不正确对'file://' URL进行校验，允许攻击者访问任意文件。 0 Advantech WebAccess 7.1 Advantech WebAccess 7.2版本已修复该漏洞，建议用户下载使用： http://webaccess.advantech.com/...

SIEMENS SIMATIC WinCC Open Architecture拒绝服务漏洞

BUGTRAQ ID: 65347 CVECAN ID: CVE-2014-1699 Siemens SIMATIC WinCC 是监测控制和数据采集SCADA及人机界面HMI系统。 SIEMENS SIMATIC WinCC OA 3.12 P002之前版本存在安全漏洞，远程攻击者通过向端口4999发送畸形的HTTP请求，利用此漏洞即可造成拒绝服务（监控服务中断）。 0 Siemens SIMATIC WinCC Open Architecture 3.12 P002 January 厂商补丁： Siemens -------...

GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY CimWebServer.exe目录遍历漏洞

CVECAN ID: CVE-2014-0751 GE Proficy CIMPLICITY是客户端/服务器业务可视化和控制解决方案。 GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 8.2 SIM 24之前版本中，CimWebServer.exe（即组件WebView）及Proficy Process Systems在实现上存在目录遍历漏洞，远程攻击者通过向TCP端口10212发送特制的消息，利用此漏洞可执行任意代码。 0 ge-ip Proficy CIMPLICITY 8.2 SIM 24 厂商补丁： ge-ip...

CVE-2014-0751

The CIMPLICITY Web-based access component, CimWebServer, does not check the location of shell files being loaded into the system. By modifying the source location, an attacker could send shell code to the CimWebServer which would deploy the nefarious files as part of any SCADA project. This could...

Directory traversal

Directory traversal vulnerability in CimWebServer.exe aka the WebView component in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted message to TCP port 10212, aka...

Directory traversal

Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-16...

CVE-2014-0751 GE Proficy HMI/SCADA Path Traversal

The CIMPLICITY Web-based access component, CimWebServer, does not check the location of shell files being loaded into the system. By modifying the source location, an attacker could send shell code to the CimWebServer which would deploy the nefarious files as part of any SCADA project. This could...

CVE-2014-0750 GE Proficy HMI/SCADA Path Traversal

Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-16...

CVE-2014-0750

GE Proficy CIMPLICITY CIMPLICITY CIMPLICITY: A path traversal vulnerability (CVE-2014-0750) in gefebt.exe within the WebView CimWebServer/Proficy CIMPLICITY components allows remote code execution via crafted HTTP requests. Affected products include Proficy HMI/SCADA - CIMPLICITY (versions up to ...

CVE-2014-0751

CVE-2014-0751 affects GE Proficy HMI/SCADA CIMPLICITY CimWebServer (CimWebServer) where the CimWebServer does not validate the location of shell files, enabling remote attackers to load shell code and, per disclosures, potentially execute arbitrary code. Public analyses describe path traversal vu...

Zero Day Vulnerability Patched in SCADA HMI Software

Malaysian SCADA software company Ecava released a patch yesterday for a zero-day vulnerability in its flagship human machine interface HMI that was publicly disclosed at a conference this week. The patch repairs a buffer overflow vulnerability in the company’s IntegraXor Web-based HMI software. H...

USB Malware Targeting Siemens Control Software (Update C)

Overview VirusBlokAda, an antivirus vendor based in Belarus, announcedVirusBlokAda, http://www.anti-virus.by/en/tempo.shtml, website last visited July 15, 2010. the discovery of malware that uses a zero-day vulnerability in Microsoft Windows processing of shortcut files. The malware utilizes this...

Siemens WinCC TIA Portal Vulnerabilities

Overview This advisory provides mitigation details for a vulnerability that impacts the Siemens WinCC TIA Totally Integrated Automation Portal HMI. Researchers Billy Rios and Terry McCorkle of Cylance; Gleb Gritsai, Sergey Bobrov, Roman Ilin, Artem Chaykin, Timur Yunusov, and Ilya Karpov from...

GE Intelligent Platforms Proficy Cimplicity Multiple Vulnerabilities

Overview This advisory provides mitigation details for multiple vulnerabilities that impact GE Intelligent Platforms Proficy HMI/SCADA—CIMPLICITY. General Electric GE has addressed two vulnerabilities in GE Intelligent Platforms Proficy HMI/SCADA—CIMPLICITY: a directory transversal vulnerability...

SpecView Directory Traversal

Overview This advisory is a follow up to the original alert titled ICS-ALERT-12-214-01 SpecView Directory Traversal that was published August 01, 2012, on the ICS-CERT Web. This advisory provides mitigation details for a vulnerability, which impacts SpecView products. Independent researcher Luigi...

Xxe

Invensys Wonderware InTouch HMI 2012 R2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via an XML document containing an external entity declaration in conjunction with an entity referenc...

CVE-2012-4709

Invensys Wonderware InTouch HMI 2012 R2 and earlier are affected by CVE-2012-4709 due to unsafe XML external entity handling (XXE). An attacker could craft an XML document with an external entity and cause the application to read local or remote files, send HTTP requests to intranet resources, or...