CVE-2018-7842

CVE-2018-7842 Productos afectados Schneider Electric Modicon M580 Versión 2.90 Schneider Electric Modicon M340 Versión 3.10 Schneider Electric Modicon Premium Todas las versiones Schneider Electric Modicon Quantum Todas las versiones Referencias...

CirCarLife <4.3 - Improper Authentication

CirCarLife before 4.3 is susceptible to improper authentication. A PLC status disclosure exists due to lack of authentication for /html/devstat.html. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16670 info: name: CirCarLife 4.3 -...

apxutil

一个用于操作施耐德电气PLC归档文件的工具 该工具可以提取并重新组装PLC的“归档”文件，这些文件被多个施耐德电气PLC使用，至少包括M580、M340和Quantum。扩展名为.sta的归档文件实际上是一个包含几个文件的ZIP压缩包。在归档中，真正重要的文件名为Station.apx。该文件的内容是在（完整）程序下载/上传过程中与PLC之间传输的数据。自然，它包含了PLC程序的实际可执行代码。但它也包含了在Control Expert Classic（或Unity Pro）中编辑PLC程序所需的所有信息。.apx文件格式是专有的，关于它的信息很少。可以从Liras en la...

ICSSecurityScripts

ICSSecurityScripts Scripts de Seguridad Industrial Beckhoff-CX9020-WebControl.py: Control del PLC Beckhoff CX9020 con Windows CE FullBeckhoffScan.py: Script elaborado para escanear Y hackear PLCs de Beckhoff PhoenixControlPLC-ILC150.py: Imprime el estado de la CPU y lo revierte, probado y...

Stuxnet

Stuxnet Este repositorio contiene una reconstrucción estrictamente educativa y orientada a la investigación del famoso gusano Stuxnet. Es el producto de innumerables horas de trabajo de ingeniería inversa realizado por la comunidad global de investigadores de seguridad sobre las muestras binarias...

CVE-2023-1698

wagoexploit.py - Exploit PoC para CVE-2023-1698 🚀 Acerca de wagoexploit.py es un exploit de prueba de concepto PoC para CVE-2023-1698 , una vulnerabilidad crítica que afecta a PLC WAGO. Este exploit otorga al atacante acceso a la shell del dispositivo, exponiendo potencialmente operaciones...

ics-forensics-tools

ICSpector: Microsoft ICS Forensics Framework Microsoft ICS Forensics Tools framework is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files. The framework provides investigators with a convenient way to scan for PLCs and identify any suspiciou...

ics-forensics-tools

ICSpector: Framework de Análisis Forense ICS de Microsoft El framework Microsoft ICS Forensics Tools es un framework forense de código abierto que permite el análisis de metadatos y archivos de proyecto de PLC industriales. El framework proporciona a los investigadores una forma conveniente de...

CVE-2018-7849

CVE-2018-7849 Productos Afectados Schneider Electric Modicon M580 Versión 2.90 Schneider Electric Modicon M340 Versión 3.10 Schneider Electric Modicon Premium Todas las Versiones Schneider Electric Modicon Quantum Todas las Versiones Referencias...

ICSFuzz

ICSFuzz: Herramienta de Fuzzing para Aplicaciones de Control ICS Descripción general ICSFuzz es una herramienta de fuzzing del lado del PLC para descubrir vulnerabilidades en aplicaciones de control ICS por Dimitris Tychalas @ditihala .. @ditihala: https://www.twitter.com/ditihala Instalación La...

CVE-2018-7843

CVE-2018-7843 Productos Afectados Schneider Electric Modicon M580 Versión 2.80 Schneider Electric Modicon M340 Versión 3.10 Schneider Electric Modicon Premium Versión 3.20 Schneider Electric Modicon Quantum Versión 3.60 Referencias https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...

CVE-2026-3869

CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running on the PLC...

CVE-2026-3869

CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running on the PLC...

EUVD-2026-76132

CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running on the PLC...

CVE-2026-3869

CVE-2026-3869 is a Critical (CVSS 4.0: 9.2) vulnerability in the Schneider Electric Modicon M580 programmable logic controller (PLC). The flaw is a CWE-303 (Incorrect Implementation of Authentication Algorithm) that can lead to loss of confidentiality, integrity, and availability of the PLC when ...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure

The U.S. government on Wednesday warned of an "active threat" targeting critical infrastructure organizations in the country using artificial intelligence AI-generated exploit scripts. The activity is targeting Siemens S7 SeriesProgrammable Logic Controllers PLCs to conduct reconnaissance and...

CVE-2026-47721 FUXA: Scheduler API missing admin check enables operator-to-admin escalation via scheduled device actions

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.3.2, POST /api/scheduler and DELETE /api/scheduler in server/api/scheduler/index.js do not consistently enforce authJwt.haveAdminPermission for scheduler settings. An authenticated non-admin operator can create or...

CVE-2026-47721

FUXA versions prior to 1.3.2 fail to enforce admin permissions on POST /api/scheduler and DELETE /api/scheduler in server/api/scheduler/index.js, allowing authenticated non-admin operators to schedule actions invoking onSetValue or onRunScript, enabling PLC setpoint changes and server-side script...

CVE-2026-47720 FUXA: SQL injection in TDengine DAQ connector via backslash bypass of escapeTdString

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Prior to 1.3.2, the TDengine DAQ storage connector's escapeTdString function in server/runtime/storage/tdengine/index.js doubles single quotes but does not escape backslashes. A remote unauthenticated attacker can submit a...