PT-2024-17930 · Honeywell · Honeywell Niagara Framework

Name of the Vulnerable Software and Affected Versions: Honeywell Niagara Framework versions prior to Niagara AX 3.8.1 Honeywell Niagara Framework versions prior to Niagara 4.1 Description: The issue is related to an Uncontrolled Resource Consumption vulnerability in Honeywell Niagara Framework on...

Honeywell Niagara Framework 资源管理错误漏洞

Honeywell Niagara Framework is a platform for open building automation and Internet of Things IoT solutions from Honeywell. A denial of service vulnerability exists in Honeywell Niagara Framework that stems from uncontrolled resource consumption. An attacker could exploit the vulnerability to cau...

Niagara Fox (Flexible Object eXchange) Service Detection

A Niagara Fox Flexible Object eXchange service is running at this host. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Researcher Hacks Google Office Management System

Industrial control minded researchers from the security firm Cylance launched a custom exploit against a building management system deployed at Google’s Sydney, Australia office, gaining access to a configuration file containing device administration passwords that could be used to gain complete...

Metasploit Module Released for Patched Honeywell ICS Vulnerability

Metasploit today released an exploit module for a serious vulnerability in Honeywell industrial control system software used to manage everything from HVAC and building access systems, to energy and facilities management processes. The vulnerability was reported by Rapid7 researcher Juan Vazquez ...

Vulnerability Patched in Schneider Electric ICS Gear

The Industrial Control System CERT released an advisory this week warning of a vulnerability in a popular sensor monitoring system used in a number of critical industries, including energy, water and manufacturing. Aaron Portnoy of Exodus Intelligence discovered the flaw in the Windows-based...

SCADA, ICS Bug Brokering Mirrors IT Vulnerability Market

SAN JUAN, Puerto Rico – The world of SCADA and industrial control system vulnerabilities is starting to mirror that of IT security, not only in the demonstration and exploitation of zero-day vulnerabilities, but in the brokering of flaws and exploits between hackers and organizations interested i...

PT-2012-4446 · Tridium · Tridium Niagara Ax Framework

Name of the Vulnerable Software and Affected Versions: Tridium Niagara AX Framework versions prior to 3.7 Description: The issue concerns the default configuration of the software, which uses a cleartext base64 format for transmitting credentials in cookies. This allows remote attackers to obtain...

PT-2012-5155 · Tridium · Tridium Niagara Ax Framework

Name of the Vulnerable Software and Affected Versions: Tridium Niagara AX Framework affected versions not specified Description: The issue concerns the improper storage of credential data, allowing attackers to bypass access restrictions by using the stored information for authentication...

PT-2012-5154 · Tridium · Tridium Niagara Ax Framework

Name of the Vulnerable Software and Affected Versions: Tridium Niagara AX Framework affected versions not specified Description: The issue allows remote attackers to read files outside of the intended images, nav, and px folders by leveraging incorrect permissions. This can be demonstrated by...