ICS Malware Found on Vendors' Update Installers

Malware targeting industrial control systems has infected the update installers belonging to three known industrial control vendors, according to an advisory from the Industrial Control Systems Cyber Emergency Response Team ICS-CERT. The Havex remote access Trojan RAT is targeting vendors via...

Stuxnet-like 'Havex' Malware Strikes European SCADA Systems

Security researchers have uncovered a new Stuxnet like malware, named as “Havex”, which was used in a number of previous cyber attacks against organizations in the energy sector. Just like Famous Stuxnet Worm, which was specially designed to sabotage the Iranian nuclear project, the new trojan...

IOServer越界读取漏洞

Bugtraq ID:66761 CVE ID:CVE-2014-0777 IOServer是运行在Windows上的工业控制软件，包含内置Web服务器以支持XML服务器功能。 OPC Drivers 1.0.20之前版本内的Modbus从站及分站驱动程序在实现上存在越界读漏洞，攻击者通过特制的数据包，利用此漏洞可造成拒绝服务。 0 ioserver ioserver = 1.0.20 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.ioserver.com/...

CVE-2014-0777

The Modbus slave/outstation driver in the OPC Drivers 1.0.20 and earlier in IOServer OPC Server allows remote attackers to cause a denial of service out-of-bounds read and daemon crash via a crafted packet...

Out-of-bounds

The Modbus slave/outstation driver in the OPC Drivers 1.0.20 and earlier in IOServer OPC Server allows remote attackers to cause a denial of service out-of-bounds read and daemon crash via a crafted packet...

CVE-2014-0777

The CVE-2014-0777 issue affects IOServer’s OPC Server (Windows) in the Modbus slave/outstation driver present in OPC Drivers 1.0.20 and earlier. The root cause is an out-of-bounds read in the Modbus driver, which attackers can trigger with a crafted packet to cause denial of service (daemon crash...

CVE-2014-0777: Out-of-bounds Read

The Modbus slave/outstation driver in the OPC Drivers 1.0.20 and earlier in IOServer OPC Server allows remote attackers to cause a denial of service out-of-bounds read and daemon crash via a crafted packet...

PT-2014-3837

Name of the Vulnerable Software and Affected Versions IOServer OPC Server versions 1.0.20 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and daemon crash, via a crafted packet. This is related to the Modbus slave/outstati...

CVE-2014-0789

Multiple buffer overflows in the OPC Automation 2.0 Server Object ActiveX control in Schneider Electric OPC Factory Server OFS TLXCDSUOFS33 3.5 and earlier, TLXCDSTOFS33 3.5 and earlier, TLXCDLUOFS33 3.5 and earlier, TLXCDLTOFS33 3.5 and earlier, and TLXCDLFOFS33 3.5 and earlier allow remote...

Buffer overflow

Multiple buffer overflows in the OPC Automation 2.0 Server Object ActiveX control in Schneider Electric OPC Factory Server OFS TLXCDSUOFS33 3.5 and earlier, TLXCDSTOFS33 3.5 and earlier, TLXCDLUOFS33 3.5 and earlier, TLXCDLTOFS33 3.5 and earlier, and TLXCDLFOFS33 3.5 and earlier allow remote...

CVE-2014-0789 Schneider Electric OPC Factory Server Buffer Overflow

Multiple buffer overflows in the OPC Automation 2.0 Server Object ActiveX control in Schneider Electric OPC Factory Server OFS TLXCDSUOFS33 3.5 and earlier, TLXCDSTOFS33 3.5 and earlier, TLXCDLUOFS33 3.5 and earlier, TLXCDLTOFS33 3.5 and earlier, and TLXCDLFOFS33 3.5 and earlier allow remote...

CVE-2014-0789

Schneider Electric OPC Factory Server (OFS)

CVE-2014-0789: Heap-based Buffer Overflow

Multiple buffer overflows in the OPC Automation 2.0 Server Object ActiveX control in Schneider Electric OPC Factory Server OFS TLXCDSUOFS33 3.5 and earlier, TLXCDSTOFS33 3.5 and earlier, TLXCDLUOFS33 3.5 and earlier, TLXCDLTOFS33 3.5 and earlier, and TLXCDLFOFS33 3.5 and earlier allow remote...

PT-2014-3843

Name of the Vulnerable Software and Affected Versions Schneider Electric OPC Factory Server OFS versions 3.5 and earlier Description The issue is related to multiple buffer overflows in the OPC Automation 2.0 Server Object ActiveX control. This can be exploited by remote attackers to cause a deni...

Patch Available for Schneider Electric Serial Modbus Driver

Schneider Electric, a leading provider of industrial control systems, recently patched a remotely exploitable vulnerability in a driver found in 11 of its products. The Industrial Control Systems Computer Emergency Response Team ICS-CERT released an advisory yesterday alerting users to the...

CVE-2014-0774

Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server OFS TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file...

Stack overflow

Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server OFS TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file...

CVE-2014-0774 Schneider Electric OFS Stack Buffer Overflow

Stack-based buffer overflow in the C++ sample client in Schneider Electric OPC Factory Server OFS TLXCDSUOFS33 - 3.35, TLXCDSTOFS33 - 3.35, TLXCDLUOFS33 - 3.35, TLXCDLTOFS33 - 3.35, and TLXCDLFOFS33 - 3.35 allows local users to gain privileges via vectors involving a malformed configuration file...

CVE-2014-0774

CVE-2014-0774 affects Schneider Electric OPC Factory Server (OFS) – specifically the OFS Client stack (TLXCDSUOFS33, TLXCDSTOFS33, TLXCDLUOFS33, TLXCDLTOFS33, TLXCDLFOFS33 at 3.35). The root cause is a stack-based buffer overflow in the parsing of a demonstration/configuration file, which can lea...

PT-2014-3836

Name of the Vulnerable Software and Affected Versions Schneider Electric OPC Factory Server OFS versions 3.35 Description The issue is related to a stack-based buffer overflow in the C++ sample client. This can be exploited by local users to gain privileges through vectors involving a malformed...