PT-2018-6515

Name of the Vulnerable Software and Affected Versions: OPC Foundation Local Discovery Server LDS version 1.03.370 Description: The issue allows attackers to trigger a crash by placing invalid data into the configuration file, requiring an attacker to have access to the file system where the...

RSLinx Classic and FactoryTalk Linx Gateway - Privilege Escalation

RSLinx Classic and FactoryTalk Linx Gateway - Privilege Escalation Title: RSLinx Classic and FactoryTalk Linx Gateway - Privilege Escalation Date: 2017-12-11 Author: LiquidWorm Vendor: Rockwell Automation, Inc. Product web page: https://www.rockwellautomation.com Affected version: Rockwell...

CVE-2018-7559: Undefined Security Weakness

An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote attacker to determine a Server's private key by sending...

CVE-2017-11672: Unquoted Search Path or Element

The OPC Foundation Local Discovery Server LDS before 1.03.367 is installed as a Windows Service without adding double quotes around the opcualds.exe executable path, which might allow local users to gain privileges...

CVE-2017-17443: Improper Input Validation

OPC Foundation Local Discovery Server LDS 1.03.370 required a security update to resolve multiple vulnerabilities that allow attackers to trigger a crash by placing invalid data into the configuration file. This vulnerability requires an attacker with access to the file system where the...

PT-2018-5335

Name of the Vulnerable Software and Affected Versions OPC Foundation Local Discovery Server LDS versions prior to 1.03.367 Description The issue allows local users to potentially gain privileges due to the OPC Foundation Local Discovery Server LDS being installed as a Windows Service without...

RSLinx Classic and FactoryTalk Linx Gateway - Privilege Escalation

Title: RSLinx Classic and FactoryTalk Linx Gateway - Privilege Escalation Date: 2017-12-11 Author: LiquidWorm Vendor: Rockwell Automation, Inc. Product web page: https://www.rockwellautomation.com Affected version: Rockwell Automation RSLinx Classic 3.90.01 Rockwell Automation RSLinx Classic...

CVE-2018-8714

Honeywell MatrikonOPC OPC Controller before 5.1.0.0 allows local users to transfer arbitrary files from a host computer and consequently obtain sensitive information via vectors related to MSXML libraries...

CVE-2018-8714

Honeywell MatrikonOPC OPC Controller before 5.1.0.0 allows local users to transfer arbitrary files from a host computer and consequently obtain sensitive information via vectors related to MSXML libraries...

CVE-2018-8714

Honeywell MatrikonOPC OPC Controller before 5.1.0.0 allows local users to transfer arbitrary files from a host computer and consequently obtain sensitive information via vectors related to MSXML libraries...

CVE-2018-8714

CVE-2018-8714 affects Honeywell/MatrikonOPC Explorer (and related OPC Controller components) prior to version 5.1.0.0. The root issue is an information-disclosure/file-transfer vulnerability related to MSXML handling, allowing a local attacker with access to transfer arbitrary files from the host...

CVE-2018-8714: Exposure of Sensitive Information to an Unauthorized Actor

Honeywell MatrikonOPC OPC Controller before 5.1.0.0 allows local users to transfer arbitrary files from a host computer and consequently obtain sensitive information via vectors related to MSXML libraries...

OPC UA security analysis

This paper discusses our project that involved searching for vulnerabilities in implementations of the OPC UA protocol. In publishing this material, we hope to draw the attention of vendors that develop software for industrial automation systems and the industrial internet of things to problems...

Belden Hirschmann Tofino Xenon Security Appliance Firewall Bypass Vulnerability

The Tofino Xenon security appliance is the ideal solution for segmenting control networks into secure zones. A firewall bypass vulnerability exists in the Tofino Xenon security appliance prior to version 03.2.00. The vulnerability is due to a design flaw in the OPC classic and custom netfilter...

CVE-2017-11402

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in OPC classic and in custom netfilter modules allow an attacker to remotely activate rules on the firewall and to connect to any TCP port of a protected asset, thus bypassing the...

CVE-2017-11402

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in OPC classic and in custom netfilter modules allow an attacker to remotely activate rules on the firewall and to connect to any TCP port of a protected asset, thus bypassing the...

Design/Logic Flaw

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in OPC classic and in custom netfilter modules allow an attacker to remotely activate rules on the firewall and to connect to any TCP port of a protected asset, thus bypassing the...

CVE-2017-11402

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in OPC classic and in custom netfilter modules allow an attacker to remotely activate rules on the firewall and to connect to any TCP port of a protected asset, thus bypassing the...

CVE-2017-11402

The CVE affects Belden Hirschmann Tofino Xenon Security Appliance versions before 03.2.00. The root cause is design flaws in OPC Classic and in custom netfilter modules, which allow an attacker to remotely activate firewall rules and connect to any TCP port of a protected asset, effectively bypas...

CVE-2017-11402: Improper Input Validation

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in OPC classic and in custom netfilter modules allow an attacker to remotely activate rules on the firewall and to connect to any TCP port of a protected asset, thus bypassing the...