[NB07-10] Multiple vulnerabilities in Takebishi Electric DeviceXplorer MODBUS OPC server

Multiple vulnerabilities in Takebishi Electric DeviceXplorer MODBUS OPC server ============================================================================ == OPC servers provide a standard way to interoperate automation and control systems, bridging data from several industrial protocols such as...

[NB07-07] Multiple vulnerabilities in Takebishi Electric DeviceXplorer HIDIC OPC server

Multiple vulnerabilities in Takebishi Electric DeviceXplorer HIDIC OPC server ============================================================================ = OPC servers provide a standard way to interoperate automation and control systems, bridging data from several industrial protocols such as...

Takebishi Electric DeviceXPlorer OPC Server Multiple Vulnerabilities

Binary data scadadevicexploreropccodeexec.nbin...

DeviceXPlorer OPC Server错误句柄验证漏洞

DeviceXPlorer OPC Server可为各种日本电机系列提供软件接口，与作为OPC客户的应用程序相互通信。 DeviceXplorer OPC Server没有正确地验证服务器句柄，将句柄用作了客户端调用的输入参数，这允许攻击者通过特定的函数调用导致服务器崩溃或执行任意指令。 以下是有漏洞的函数： IOPCItemMgt::SetActiveState IOPCItemMgt::SetClientHandles IOPCItemMgt::SetDataTypes IOPCSyncIO::Read IOPCSyncIO::Write IOPCAsyncIO::Read...

CVE-2007-1313

NETxAutomation NETxEIB OPC Server before 3.0.1300 does not properly validate OLE for Process Control OPC server handles, which allows attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors involving the 1 IOPCSyncIO::Read, 2 IOPCSyncIO::Write, 3...

Code injection

NETxAutomation NETxEIB OPC Server before 3.0.1300 does not properly validate OLE for Process Control OPC server handles, which allows attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors involving the 1 IOPCSyncIO::Read, 2 IOPCSyncIO::Write, 3...

CVE-2007-1313

NETxAutomation NETxEIB OPC Server before 3.0.1300 does not properly validate OLE for Process Control OPC server handles, which allows attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors involving the 1 IOPCSyncIO::Read, 2 IOPCSyncIO::Write, 3...

NETxAutomation NETxEIB OPC Server fails to properly validate OPC server handles

Overview The NETxAutomation NETxEIB OPC Server contains a vulnerability that may allow a remote attacker to execute arbitary code or cause a denial-of-service. Description OLE for Process Control OPC is a specification for a standard set of OLE COM objects for use in the process control and...

Code injection

Unspecified vulnerability in the IOPCServer::RemoveGroup function in the OPCDA interface in Takebishi Electric DeviceXPlorer OLE for Process Control OPC Server before 3.12 Build3 allows remote attackers to execute arbitrary code via unspecified vectors involving access to arbitrary memory. NOTE:...

CVE-2007-1319

The CVE refers to an arbitrary code execution vulnerability in the Takebishi DeviceXPlorer OPC Server family (HIDIC, SYSMAC, MELSEC, FA-M3, MODBUS) via the OPC DA interface. The issue stems from the server implementation of the IOPCServer::RemoveGroup method, which can access arbitrary memory and...