CVE-2015-0981

The SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to bypass authentication and read or write to arbitrary database fields via unspecified vectors...

CVE-2015-0979

Summary (CVE-2015-0979) : A heap-based buffer overflow in the SOAP web interface of the SCADA Engine BACnet OPC Server prior to version 2.1.371.24 allows remote arbitrary code execution via a crafted packet. The affected component is the Windows Service SOAP interface; exploitation is remote and ...

CVE-2014-5426

CVE-2014-5426 affects MatrikonOPC Server for DNP3 (versions 1.2.3 and earlier). An unhandled C++ exception on receipt of a specially crafted DNP3 message causes the DNP3 process in the Windows service to crash, potentially allowing remote DoS. Public sources identify the issue as a remote-exploit...

CVE-2014-5426

MatrikonOPC OPC Server for DNP3 1.2.3 and earlier allows remote attackers to cause a denial of service unhandled exception and DNP3 process crash via a crafted message...

MatrikonOPC Improper Input Validation

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on January 10, 2014, and is now being released to the NCCIC/ICS-CERT web site. Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation vulnerability in the...

IOServer Resource Exhaustion Vulnerability

OVERVIEW Chris Sistrunk of Mandiant and Adam Crain of Automatak have identified an out of bound read vulnerability in the IOServer application. IOServer has produced a new version that mitigates this vulnerability. Adam Crain has tested the new version to validate that it resolves the...

Havex, It’s Down With OPC

FireEye recently analyzed the capabilities of a variant of Havex referred to by FireEye as “Fertger” or “PEACEPIPE”, the first publicized malware reported to actively scan OPC servers used for controlling SCADA Supervisory Control and Data Acquisition devices in critical infrastructure e.g., wate...

Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC

No description provided by source. !/usr/bin/python asmb-heap.py Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC Jeremy Brown 0xjbrown41-gmail-com Jan 2011 A specially crafted length field in a MODBUS packet header can trigger heap corruption. 00408312 | 8B5424 3C MOV EDX,DWO...

CVE-2014-0777

The CVE-2014-0777 issue affects IOServer’s OPC Server (Windows) in the Modbus slave/outstation driver present in OPC Drivers 1.0.20 and earlier. The root cause is an out-of-bounds read in the Modbus driver, which attackers can trigger with a crafted packet to cause denial of service (daemon crash...

CVE-2013-2829

MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed DNP3 packet...

Code injection

MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed DNP3 packet...

CVE-2013-2829

The CVE-2013-2829 entry concerns MatrikonOPC SCADA DNP3 OPC Server, affected in Version 1.2.2.0 and earlier. The root cause is improper input validation (CWE-20) that may allow a remote attacker to trigger a denial-of-service condition by processing a malformed DNP3 packet, causing the server to ...

Yokogawa Multiple Products Vulnerabilities

OVERVIEW Yokogawa reports that several buffer overflow vulnerabilities affect several of its products. Juan Vazquez of Rapid7 Inc.,Rapid7 Inc., http://www.rapid7.com, web site last accessed May 13, 2014. and independent researcher Julian Vilas Diaz reported to CERT/CC that they identified several...

IOServer Out of Bounds Read Vulnerability

OVERVIEW Chris Sistrunk of Mandiant and Adam Crain of Automatak have identified an out of bounds read vulnerability in IOServer’s OPC Server application. IOServer has released a new version that mitigates this vulnerability. The researchers have tested the new version to validate that it resolves...

CVE-2013-2814

Cooper Power Systems Cybectec DNP3 Master OPC Server allows remote attackers to cause a denial of service unhandled exception and process crash via unspecified vectors...

CVE-2013-2814

Cooper Power Systems Cybectec DNP3 Master OPC Server allows remote attackers to cause a denial of service unhandled exception and process crash via unspecified vectors...

CVE-2013-2814

CVE-2013-2814 concerns Cooper Power Systems Cybectec DNP3 Master OPC Server. The DNP3 component improperly validates input, enabling a remote attacker to trigger an unhandled exception that crashes the process (denial of service). ICS-CERT notes the vulnerability could be exploited remotely and t...

Cybectec DNP3 Master OPC Server DNP3组件拒绝服务漏洞

Bugtraq ID:64274 CVE ID:CVE-2013-2814 Cooper Power Systems Cybectec DNP3 Master OPC Server是一个电力系统相关控制软件。 Cooper Power Systems Cybectec DNP3 Master OPC Server中的DNP3组件不正确校验输入，允许远程攻击者利用漏洞提交恶意请求，触发一个未处理的异常使进程崩溃。 0 Cybectec DNP3 Master OPC Server 厂商补丁： Cooper Power Systems -----...

CVE-2013-2791

MatrikonOPC SCADA DNP3 OPC Server 1.2.0 allows remote attackers to cause a denial of service master-station daemon crash via a malformed DNP3 TCP packet from the IP address of an outstation...

CVE-2013-2791

MatrikonOPC SCADA DNP3 OPC Server 1.2.0 is affected by an improper input validation vulnerability (CWE-20) that can be triggered by a malformed DNP3 TCP packet from an outstation, potentially causing the master server to crash and disrupt OPC communication. The issue is exploitable remotely, with...