Ecava IntegraXor Cross-Site Scripting Vulnerability (CNVD-2016-02333)

Ecava IntegraXor is a set of Web-based tools for creating and running HMI interfaces for SCADA systems. A cross-site scripting vulnerability in Ecava IntegraXor for HMI operations using SCADA applications allows remote attackers to exploit the vulnerability to inject malicious script or HTML code...

Ecava IntegraXor Privilege Bypass Vulnerability

Ecava IntegraXor is a set of Web-based tools for creating and running HMI interfaces for SCADA systems. Ecava IntegraXor fails to properly check for user authorization when processing user access to sensitive web pages, allowing remote attackers to exploit the vulnerability to bypass security...

Advantech WebAccess stack buffer overflow vulnerability (CNVD-2016-00434)

WebAccess HMI/SCADA software provides remote control and management, allowing users to easily view and configure automation devices in facility management systems, power stations and building automation systems. Multiple stack buffer overflow vulnerabilities exist in Advantech WebAccess versions...

programs WinCC

The vulnerabilities of the WinCC software, Simatic NET PC-Software, Simatic Automation Tool, and Simatic HMI are related to deficiencies in password verification procedures. Exploiting these vulnerabilities can allow unauthorized users to successfully authenticate themselves by using the hash val...

Advantech WebAccess Heap Buffer Overflow Vulnerability

Advantech WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech, China. A heap buffer overflow vulnerability exists in Advantech WebAccess. A local attacker could exploit this vulnerability to execute arbitrary code, which could also result in a denial of service...

Siemens SIMATIC and SIMATIC WinCC HMI Comfort Panels Denial of Service Vulnerability

Siemens SIMATIC WinCC is a complete Supervisory Control and Data Acquisition SCADA solution for industry, ranging from single-user systems to multi-user systems supporting redundant servers and remote Web client solutions. A security vulnerability in Siemens SIMATIC HMI Comfort Panels WinCC TIA...

Inductive Automation Ignition Cross-Site Scripting Vulnerability

Ignition is an updated version of FactoryPMI, the HMI/SCADA product offered by Inductive Automation. Ignition has a security vulnerability that can be exploited by an attacker to execute malicious content in a vulnerable web application. The server reads data directly from the HTTP request and th...

Siemens ICS Switches Hit With Buffer Overflow, Authentication Bugs

There are a number of serious vulnerabilities in the Siemens Ruggedcom WIN switches, including a remotely exploitable buffer overflow and a flaw that could allow an attacker to take actions on the device without authentication. The vulnerabilities affect several models of the Ruggedcom WIN...

Schneider Electric ETG3000 FactoryCast HMI Gateway Authentication Bypass Vulnerability

The Schneider Electric ETG3000 FactoryCast HMI Gateway is a Web-based SCADA system. An authentication bypass vulnerability exists in the Schneider Electric ETG3000 FactoryCast HMI Gateway, which can be exploited by an attacker to bypass the authentication mechanism and gain unauthorized access to...

CVE-2010-4597

Ecava IntegraXor HMI is affected by CVE-2010-4597 due to a stack-based buffer overflow in the save method of igcomm.dll (IntegraXor.Project ActiveX) prior to version 3.5.3900.10. An attacker could remotely trigger arbitrary code execution by sending a long string in the second argument. ICS-CERT ...

CVE-2010-4597: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraXor Human-Machine Interface HMI before 3.5.3900.10 allows remote attackers to execute arbitrary code via a long string in the second argument...