CVE-2019-6282

The CVE-2019-6282 issue affects ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices running firmware W2001EN-00. The vulnerability is CSRF through the URI cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity, enabling an attacker to change the Wireless Security Password. Public exploit r...

CVE-2019-6279

ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 suffer an Incorrect Access Control vulnerability exposed via cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity, enabling an attacker to change the wireless password. Root cause: improper access control on the...

PT-2019-18070

Name of the Vulnerable Software and Affected Versions ChinaMobile PLC Wireless Router GPN2.4P21-C-CN version W2001EN-00 Description The issue allows an attacker to change the Wireless Security Password due to a CSRF vulnerability via the "cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity...

PT-2019-18069

Name of the Vulnerable Software and Affected Versions ChinaMobile PLC Wireless Router GPN2.4P21-C-CN version W2001EN-00 Description The issue is related to an Incorrect Access Control problem. It can be exploited via the "cgi-bin/webproc?getpage=html/index.html&subpage=wlsecurity" URI, allowing a...

CVE-2019-6282: Cross-Site Request Forgery (CSRF)

ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, allowing an Attacker to change the Wireless Security Password...

CVE-2019-6279: Undefined Security Weakness

ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulnerability via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, allowing an Attacker to change the Wireless Security Password...

The vulnerability of microprogrammed software in Siemens Simatic S7-400 programmable logic controllers is related to errors in checking input data by Ethernet, PROFIBUS, and MPI interfaces. This allows a malicious actor to trigger a service failure.

The vulnerability of microprogrammed programmable logic controllers from Siemens Simatic S7-400 is related to errors in the validation of input data by Ethernet, PROFIBUS, and MPI interfaces. Exploiting this vulnerability can allow an attacker to cause maintenance failures by sending a specially...

Design/Logic Flaw

An issue was discovered on TENGCONTROL T-920 PLC v5.5 devices. It allows remote attackers to cause a denial of service persistent failure mode by sending a series of \x19\xb2\x00\x00\x00\x06\x43\x01\x00\xac\xff\x00 aka UID 0x43 requests to TCP port 502...

CVE-2019-9590

An issue was discovered on TENGCONTROL T-920 PLC v5.5 devices. It allows remote attackers to cause a denial of service persistent failure mode by sending a series of \x19\xb2\x00\x00\x00\x06\x43\x01\x00\xac\xff\x00 aka UID 0x43 requests to TCP port 502...

CVE-2019-9590

An issue was discovered on TENGCONTROL T-920 PLC v5.5 devices. It allows remote attackers to cause a denial of service persistent failure mode by sending a series of \x19\xb2\x00\x00\x00\x06\x43\x01\x00\xac\xff\x00 aka UID 0x43 requests to TCP port 502...

CVE-2019-9590

CVE-2019-9590 affects the TENGCONTROL T-920 PLC, version v5.5. The issue allows a remote attacker to trigger a denial of service (persistent failure mode) by sending a specific payload: the byte sequence 0x19 0xB2 0x00 0x00 0x00 0x06 0x43 0x01 0x00 0xAC 0xFF 0x00 (UID 0x43) to TCP port 502. The a...

CVE-2019-9590: Undefined Security Weakness

An issue was discovered on TENGCONTROL T-920 PLC v5.5 devices. It allows remote attackers to cause a denial of service persistent failure mode by sending a series of \x19\xb2\x00\x00\x00\x06\x43\x01\x00\xac\xff\x00 aka UID 0x43 requests to TCP port 502...

PT-2019-19731

Name of the Vulnerable Software and Affected Versions TENGCONTROL T-920 PLC version 5.5 Description An issue allows remote attackers to cause a denial of service, resulting in a persistent failure mode. This can be achieved by sending a series of specific requests, identified as UID 0x43, to the...

WAGO PLC Detection (OPC UA)

OPC UA based detection of WAGO PLC Controllers. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

WECON PLC Editor Detection (Windows SMB Login)

SMB login-based detection of WECON PLC Editor. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

What you can learn from Cisco Talos’ new oil pumpjack workshop

Paul Rascagneres wrote this blog post with contributions from Patrick DeSantis from Cisco Talos ARES Advanced Research/Embedded Systems. Executive summary Every day, more industrial control systems ICS become vulnerable to cyber attacks. As these massive, critical machines become more...

PT-2019-18151

Name of the Vulnerable Software and Affected Versions WECON LeviStudioU versions 1.8.56 and prior Description Several heap-based buffer overflow issues have been identified, which may allow arbitrary code execution. These issues were reported by Mat Powell, Ziad Badawi, and Natnael Samson working...

The vulnerability of the microprogramming software used in Schneider Electric Modicon programmable logic controllers stems from incorrect processing of data in the incoming HTTP headers. This allows attackers to cause malfunctions in the device’s operation.

The vulnerability of the microprogrammed logic controllers from Schneider Electric Modicon stems from the improper elimination of CR and LF characters before data is entered into the incoming HTTP headers. Exploiting this vulnerability can allow an attacker to cause a device failure...

Malware can fully compromise building control systems

By Waqas Enterprise security vendor ForeScout’s operational technology research unit has developed a PoC Proof-of-Concept malware that exposed the vulnerabilities in building automation systems BAS by compromising them due to the presence of two very critical bugs in the BAS's PLC programmable...

Unitronics PCOM Client

Unitronics Vision PLCs allow unauthenticated PCOM commands to query PLC registers. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Unitronics PCOM Client', 'Description' = %q Unitronics Vision...