Remote Controller Removal Vulnerability in HOLLYWOOD LE5109L PLCs

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A remote controller removal vulnerability exists in the Hologic LE5109L PLC, where an attacker can construct specific modbus packets to remotely remove all program and configuration...

Arbitrary Memory Tampering Vulnerability in Hologic LE5109L PLCs

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A memory arbitrary tampering vulnerability exists in the HELISE LE5109L PLC, which can be exploited by an attacker to remotely tamper with PLC register values by constructing specific modbu...

Denial of Service Vulnerability in the Hologic LE5109L PLC

HELISE Group is a professional automation company integrating R&D, production, sales and technical service. With integrated Ethernet, PROFIBUS-DP, RS232 and RS485 interfaces, HELISE's PLCs have been widely used in electric power, chemical industry, metallurgy, energy and other fields. A denial of...

Information Disclosure Vulnerability in Hologic LE5109L PLCs

HELISE Group is a professional automation company integrating R&D, production, sales and technical service. With integrated Ethernet, PROFIBUS-DP, RS232 and RS485 interfaces, HELISE's PLCs have been widely used in electric power, chemical industry, metallurgy, energy and other fields. An...

Belden Hirschmann Tofino Xenon Security Appliance Protocol Filter Evasion Vulnerability

The Tofino Xenon security appliance is the ideal solution for segmenting control networks into secure zones. A protocol filter evasion vulnerability exists in the Tofino Xenon security appliance prior to version 03.2.00. The vulnerability arises because the ModBus DPI filter improperly handles th...

CVE-2017-11401

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering...

CVE-2017-6032

A Violation of Secure Design Principles issue was discovered in Schneider Electric Modicon Modbus Protocol. The Modicon Modbus protocol has a session-related weakness making it susceptible to brute-force attacks...

CVE-2017-6034 Schneider Electric Modicon Modbus Protocol Authentication Bypass by Capture-replay

An authentication bypass by capture-replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modbus protocol, which may allow an attacker to replay the following commands: run, stop, upload, and download...

CVE-2017-6032

A Violation of Secure Design Principles issue was discovered in Schneider Electric Modicon Modbus Protocol. The Modicon Modbus protocol has a session-related weakness making it susceptible to brute-force attacks...

CVE-2017-6032

CVE-2017-6032 concerns Schneider Electric Modicon Modbus Protocol: a session-related weakness in Modbus that may allow brute-force-style access. Affected component: Modbus protocol in Schneider Electric Modicon PLCs; impact described as potential exposure of control commands with low to moderate ...

VulnCheck KEV: CVE-2015-5374

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant...

Schneider Electric Devices Detection (Modbus)

Modbus protocol based detection of Schneider Electric devices. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Shanghai Xunrao X2Cloud Cloud Gateway Denial of Service Vulnerability

X2Cloud cloud gateway is a cloud gateway product of Shanghai Xunrao Company. The gateway collects data and then stores the data to the cloud platform, which sends the data to the outside through Modbus TCP interface or its own Web interface. Shanghai Xunrao X2Cloud cloud gateway denial of service...

[SECURITY] Fedora 23 Update: libmodbus-3.0.6-1.fc23

libmodbus is a C library designed to provide a fast and robust implementati on of the Modbus protocol. It runs on Linux, Mac OS X, FreeBSD, QNX and Windows. This package contains the libmodbus shared library...

[SECURITY] Fedora 22 Update: libmodbus-3.0.6-1.fc22

libmodbus is a C library designed to provide a fast and robust implementati on of the Modbus protocol. It runs on Linux, Mac OS X, FreeBSD, QNX and Windows. This package contains the libmodbus shared library...

Modbus Client Utility

This module allows reading and writing data to a PLC using the Modbus protocol. This module is based on the 'modiconstop.rb' Basecamp module from DigitalBond, as well as the mbtget perl script. This module requires Metasploit: https://metasploit.com/download Current source:...