Car Backdoor Maker: CBM

Car Backdoor Maker For the first time, a hardware backdoor tool is presented having several advanced features, such as: remote control via SMS commands, automated launch of attack payloads at a GPS location or when a specific car status is reached; and a configuration interface that allows users ...

CVE-2017-6865: Improper Input Validation

A vulnerability has been identified in Primary Setup Tool PST All versions V4.2 HF1, SIMATIC Automation Tool All versions V3.0, SIMATIC NET PC-Software All versions V14 SP1, SIMATIC PCS 7 V8.1 All versions, SIMATIC PCS 7 V8.2 All versions V8.2 SP1, SIMATIC STEP 7 TIA Portal V13 All versions V13...

CVE-2016-7165: Improper Access Control

A vulnerability has been identified in Primary Setup Tool PST All versions V4.2 HF1, SIMATIC IT Production Suite All versions V7.0 SP1 HFX 2, SIMATIC NET PC-Software All versions V14, SIMATIC PCS 7 V7.1 All versions, SIMATIC PCS 7 V8.0 All versions, SIMATIC PCS 7 V8.1 All versions, SIMATIC PCS 7...

Siemens Discloses Local Privilege Escalation Bug in SCADA Gear

German engineering giant Siemens is warning operators of a local privilege escalation vulnerability that leaves more than a dozen models of its SCADA equipment open to attack. Some of the issues have been patched, or in other cases, Siemens has provided a workaround. The vulnerability was disclos...

Siemens SIMATIC NET PCSoftware Denial of Service Vulnerability

SIMATIC NET is an open and multifaceted communication system provided by Siemens at the industrial control level. A denial of service vulnerability exists in Siemens SIMATIC NET PCSoftware. An attacker can exploit the vulnerability by sending specially crafted packets to ports...

CVE-2016-5874

Siemens SIMATIC NET PC-Software before 13 SP2 allows remote attackers to cause a denial of service OPC UA service outage via crafted TCP packets...

CVE-2016-5874

Siemens SIMATIC NET PC-Software before 13 SP2 allows remote attackers to cause a denial of service OPC UA service outage via crafted TCP packets...

Code injection

Siemens SIMATIC NET PC-Software before 13 SP2 allows remote attackers to cause a denial of service OPC UA service outage via crafted TCP packets...

CVE-2016-5874

Siemens SIMATIC NET PC-Software before 13 SP2 allows remote attackers to cause a denial of service OPC UA service outage via crafted TCP packets...

CVE-2016-5874

The vulnerability CVE-2016-5874 affects Siemens SIMATIC NET PC-Software prior to version 13 SP2. The underlying issue is a denial-of-service condition caused by specially crafted TCP packets sent to specific OPC-UA-related ports (55101–55105, 4845, 4847–4850). Successful exploitation can cause an...

CVE-2016-5874: Improper Input Validation

Siemens SIMATIC NET PC-Software before 13 SP2 allows remote attackers to cause a denial of service OPC UA service outage via crafted TCP packets...

Siemens SIMATIC NET PC-Software Denial-of-Service Vulnerability

OVERVIEW Siemens has identified a denial-of-service vulnerability in SIMATIC NET PC-Software. Vladimir Dashchenko and Sergey Temnikov from Kaspersky Labs reported this issue directly to Siemens. Siemens has produced a new version to mitigate this vulnerability. This vulnerability could be exploit...

HP OpenView Client Configuration Manager Default Credentials

The remote host is running HP OpenView Client Configuration Manager OVCCM, a PC software configuration management application. The remote installation of OVCCM is configured to use default credentials to control access. Knowing these, an attacker can gain control of the affected application...