Cogent DataHub < 6.4.3 OPC Client Reconnection Saturation Remote DoS

Binary data scadacogentdatahub643.nbin...

Cogent DataHub < 6.4.5Beta OPC Connection Failure DoS

Binary data scadacogentdatahub645beta.nbin...

CVE-2016-4524

ABB PCM600 before 2.7 improperly stores OPC Server IEC61850 passwords in unspecified temporary circumstances, which allows local users to obtain sensitive information via unknown vectors...

Design/Logic Flaw

ABB PCM600 before 2.7 improperly stores OPC Server IEC61850 passwords in unspecified temporary circumstances, which allows local users to obtain sensitive information via unknown vectors...

CVE-2016-4524

ABB PCM600 before 2.7 improperly stores OPC Server IEC61850 passwords in unspecified temporary circumstances, which allows local users to obtain sensitive information via unknown vectors...

CVE-2016-4524

CVE-2016-4524 affects ABB PCM600 (OPC Server IEC61850) prior to version 2.7. The vulnerability arises from insecure handling of authentication passwords: the OPC Server IEC61850 credentials are stored in clear text or unsecured temporary locations in the configuration/file artifacts, enabling a l...

CVE-2016-4524: Improper Access Control

ABB PCM600 before 2.7 improperly stores OPC Server IEC61850 passwords in unspecified temporary circumstances, which allows local users to obtain sensitive information via unknown vectors...

PT-2016-2333

Name of the Vulnerable Software and Affected Versions ABB PCM600 versions prior to 2.7 Description The issue is related to the improper storage of OPC Server IEC61850 passwords in temporary circumstances, allowing local users to obtain sensitive information. The vulnerability is associated with t...

Certec EDV atvise SCADA Server 2.5.9 - Local Privilege Escalation

Certec EDV atvise SCADA server 2.5.9 Privilege Escalation Vulnerability Vendor: Certec EDV GmbH Product web page: http://www.atvise.com Affected version: 2.5.9 Summary: atvise scada is based on newest technologies and standards: The visualization in pure web technology as well as a consistent...

Siemens SIMATIC NET PC-Software Denial-of-Service Vulnerability

OVERVIEW Siemens has identified a denial-of-service vulnerability in SIMATIC NET PC-Software. Vladimir Dashchenko and Sergey Temnikov from Kaspersky Labs reported this issue directly to Siemens. Siemens has produced a new version to mitigate this vulnerability. This vulnerability could be exploit...

CVE-2015-7917

Untrusted search path vulnerability in Open Automation OPC Systems.NET 8.00.0023 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2015-7917

Untrusted search path vulnerability in Open Automation OPC Systems.NET 8.00.0023 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Open Automation OPC Systems.NET 8.00.0023 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2015-7917

CVE-2015-7917 affects OPC Systems.NET (Open Automation Software) prior to and including 8.00.0023, caused by Untrusted Search Path/DLL Hijacking. Local users can privilege/escalate by placing a Trojan DLL in a vulnerable directory; exploitation requires local access and user interaction to load t...

CVE-2015-7917

Untrusted search path vulnerability in Open Automation OPC Systems.NET 8.00.0023 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

PT-2015-7668

Name of the Vulnerable Software and Affected Versions Open Automation OPC Systems.NET versions 8.00.0023 and earlier Description The issue allows local users to gain privileges via a Trojan horse DLL in an unspecified directory. This is due to an untrusted search path vulnerability. Recommendatio...

CVE-2015-7917: Undefined Security Weakness

Untrusted search path vulnerability in Open Automation OPC Systems.NET 8.00.0023 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

OPC Systems.NET Local Privilege Vulnerability

OPC Systems.NET is a complete suite of products from the OPC Foundation of America that provides all . A local elevation of privilege vulnerability exists in OPC Systems.NET 8.00.0023 and earlier versions, which stems from the program failing to properly load a Dynamic Link Library DLL file. An...

SCADA Engine BACnet OPC Server Vulnerabilities

OVERVIEW Independent researcher Josep Pi Rodriguez has identified three vulnerabilities in the SCADA Engine BACnet OPC Server application. SCADA Engine has produced a new software version that mitigates these vulnerabilities. Josep Pi Rodriguez has tested the new software version to validate that...

GEOVAP Reliance 4 Control Server Privilege Escalation Vulnerability

GEOVAP Reliance 4 Control Server suffers from an unquoted search path issue impacting the service 'RelianceOpcDaWrapper' for Windows deployed as part of Reliance 4 SCADA/HMI system installer including Reliance OPC Server. This could potentially allow an authorized but non-privileged local user to...