CVE-2025-54851: Missing Authentication for Critical Function

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this...

CVE-2025-54850: Missing Authentication for Critical Function

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this...

CVE-2025-23417: Missing Authentication for Critical Function

A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability...

CVE-2025-20085: Missing Authentication for Critical Function

A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to denial of service and weaken credentials resulting in default documented credentials being applied to the device. An attacker can...

CVE-2025-54849: Missing Authentication for Critical Function

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this...

PT-2025-48482

Name of the Vulnerable Software and Affected Versions Socomec DIRIS Digiware M-70 version 1.6.9 Description A denial of service issue exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality. An attacker can send an unauthenticated, specially crafted network packet to trigger a...

Unspecified Buffer Overflow Vulnerability in Advantech EKI-1200 Series

Advantech EKI-1200 Gateway is the EKI-1200 series Modbus data gateway product from Advantech China, which is mainly used to integrate Modbus/RTU and Modbus/ASCI serial devices into bi-directional gateways based on TCP/IP networks. An unspecified buffer overflow vulnerability exists in the Advante...

CAS Modbus RTU Parser Buffer Overflow Exploit

Exploit for windows platform in category local exploits hello, nice to meet u A few day ago, Senator of Pirates published CAS Modbus RTU Parser Buffer Overflow PoC code, so i try to make Exploit Code, This is Exploit Title: CAS Modbus RTU Parser Buffer Overflow Exploit Date: 2012,09,07 Author:...

CAS Modbus RTU Parser Buffer Overflow SEH (PoC)

Exploit for windows platform in category dos / poc Title : CAS Modbus RTU Parser Buffer Overflow SEH PoC Author : Senator of Pirates Founder : Marshal Webb Link Software : http://www.chipkin.com/technical-resources/cas-modbus-rtu-parser/ FaceBook : /SenatorofPiratesInfo Marshal's FaceBook :...

CVE-2011-1914

Buffer overflow in the Advantech ADAM OLE for Process Control OPC Server ActiveX control in ADAM OPC Server before 3.01.012, Modbus RTU OPC Server before 3.01.010, and Modbus TCP OPC Server before 3.01.010 allows remote attackers to execute arbitrary code via unspecified vectors...

Buffer overflow

Buffer overflow in the Advantech ADAM OLE for Process Control OPC Server ActiveX control in ADAM OPC Server before 3.01.012, Modbus RTU OPC Server before 3.01.010, and Modbus TCP OPC Server before 3.01.010 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-1914: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Advantech ADAM OLE for Process Control OPC Server ActiveX control in ADAM OPC Server before 3.01.012, Modbus RTU OPC Server before 3.01.010, and Modbus TCP OPC Server before 3.01.010 allows remote attackers to execute arbitrary code via unspecified vectors...

PT-2012-1536

Name of the Vulnerable Software and Affected Versions Advantech ADAM OPC Server version 3.01.012 and earlier Advantech Modbus RTU OPC Server version 3.01.010 and earlier Advantech Modbus TCP OPC Server version 3.01.010 and earlier Description The issue is related to a buffer overflow in the Activ...

CVE-2010-4733

WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms have a default username and password, which makes it easier for remote attackers to obtain superadmin access via the web interface, a...

Default credentials

WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms have a default username and password, which makes it easier for remote attackers to obtain superadmin access via the web interface, a...

Design/Logic Flaw

cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to execute arbitrary code by using a config.html 2.conf action to...

CVE-2010-4731

Absolute path traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a...

CVE-2010-4730

CVE-2010-4730, CVE-2010-4731, CVE-2010-4732, CVE-2010-4733 describe security issues in WebSCADA NetBiter NB100/NB200 platforms (WS100/WS200, EC150, MB100, SS100). All relate to the same product family and involve cgi-bin/read.cgi vulnerabilities that allow traversal or manipulation of files when ...

CVE-2010-4733

CVE-2010-4733 and related entries describe default-credential and remote-authenticated risks affecting Intellicom NetBiter NetSCADA WebSCADA components (WS100/WS200, EC150, MB100, SS100 on NB100/NB200). The root issue cited is default usernames/passwords allowing superadmin access via the web int...

CVE-2010-4732

CVE-2010-4732 affects WebSCADA WS100/WS200, Easy Connect EC150, Modbus RTU-TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100/NB200 platforms. The vulnerability is in cgi-bin/read.cgi and lets remote authenticated administrators replace the logo page GIF via a co...