CVE-2015-0979

Heap-based buffer overflow in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via a crafted packet...

Heap overflow

Heap-based buffer overflow in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via a crafted packet...

Format string

Format string vulnerability in BACnOPCServer.exe in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via format string specifiers in a request...

CVE-2015-0981

The SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to bypass authentication and read or write to arbitrary database fields via unspecified vectors...

CVE-2015-0979

Summary (CVE-2015-0979) : A heap-based buffer overflow in the SOAP web interface of the SCADA Engine BACnet OPC Server prior to version 2.1.371.24 allows remote arbitrary code execution via a crafted packet. The affected component is the Windows Service SOAP interface; exploitation is remote and ...

CVE-2015-0980

SCADA Engine BACnet OPC Server (BACnet OPC Server) before version 2.1.371.24 is affected by CVE-2015-0980 via a format-string vulnerability in the SOAP web interface (BACnOPCServer.exe). Exploitation could allow remote attackers to execute arbitrary code. The ICS-CERT advisory notes a fixed versi...

CVE-2015-0981

SCADA Engine BACnet OPC Server prior to version 2.1.371.24 is affected by three vulnerabilities tied to the SOAP web interface: (1) CVE-2015-0981 Authentication bypass allowing remote read/write of database fields, (2) CWE-122 Heap-based Buffer Overflow, and (3) CWE-20 Improper Input Validation. ...

CVE-2015-0981: Undefined Security Weakness

The SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to bypass authentication and read or write to arbitrary database fields via unspecified vectors...

CVE-2015-0980: Improper Input Validation

Format string vulnerability in BACnOPCServer.exe in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via format string specifiers in a request...

CVE-2015-0979: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via a crafted packet...

PT-2015-5001

Name of the Vulnerable Software and Affected Versions SCADA Engine BACnet OPC Server versions prior to 2.1.371.24 Description A heap-based buffer overflow issue exists in the SOAP web interface, allowing remote attackers to execute arbitrary code via a crafted packet. Recommendations For versions...

PT-2015-5002

Name of the Vulnerable Software and Affected Versions SCADA Engine BACnet OPC Server versions prior to 2.1.371.24 Description The issue is related to a format string vulnerability in the BACnOPCServer.exe component, specifically in the SOAP web interface. This vulnerability allows remote attacker...

PT-2015-5003

Name of the Vulnerable Software and Affected Versions SCADA Engine BACnet OPC Server versions prior to 2.1.371.24 Description The issue allows remote attackers to bypass authentication and read or write to arbitrary database fields. Recommendations For versions prior to 2.1.371.24, update to...

Schneider Electric OFS Server Vulnerability (Update A)

OVERVIEW --------- Begin Update A Part 1 of 4 -------- This updated advisory is a follow-up to the original advisory titled ICSA-15-141-01 Schneider Electric OFS Server Vulnerability that was published May 21, 2015, on the NCCIC/ICS-CERT web site. Ivan Sanchez from Nullcode Team has identified tw...

Rockwell Automation RSLinx Classic Vulnerability

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on April 21, 2015, and is being released to the NCCIC/ICS-CERT web site. Ivan Sanchez of WiseSecurity Team has identified a stack-based buffer overflow vulnerability in Rockwell Automation’s OPCTest.exe, which is a...

BACnet-OPC-Client-Buffer-Overflow

After communicating via several emails with the vendor, sharing details about the vulnerability, as well as proof-of-concept code I also offered to send the exploit code for them to test themselves, it was clear that they weren't very interested in fixing the vulnerability. import sys import stru...

Schneider Electric OFS Buffer Overflow Vulnerability

OVERVIEW Schneider Electric has reported to NCCIC/ICS-CERT a Stack Buffer Overflow vulnerability supplied with the Schneider Electric OPC Factory Server OSF. Independent researcher known as 0x7A240E67 submitted the vulnerability to ZDI, who provided coordination with the vendor and ICS-CERT...

CVE-2014-5426

MatrikonOPC OPC Server for DNP3 1.2.3 and earlier allows remote attackers to cause a denial of service unhandled exception and DNP3 process crash via a crafted message...

CVE-2014-5426

CVE-2014-5426 affects MatrikonOPC Server for DNP3 (versions 1.2.3 and earlier). An unhandled C++ exception on receipt of a specially crafted DNP3 message causes the DNP3 process in the Windows service to crash, potentially allowing remote DoS. Public sources identify the issue as a remote-exploit...

PT-2014-6468

Name of the Vulnerable Software and Affected Versions MatrikonOPC OPC Server for DNP3 versions 1.2.3 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in an unhandled exception and a crash of the DNP3 process, via a crafted message. Recommendations...