CVE-2013-2763

Summary (CVE-2013-2763) : The Schneider Electric M340 PLC modules are reported to be susceptible to a remote denial-of-service (resource consumption) via unspecified vectors. The vendor disputes the issue, stating it could not be duplicated and that the observed behavior could not remotely deny P...

CVE-2013-2761

Summary: CVE-2013-2761 affects Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules. Vulnerability: Remote authenticated users can trigger a denial of service (module crash) by sending crafted FTP traffic (as demonstrated with FileZilla). Impact: Partial availability loss of the affected...

BlazeVideo HDTV Player 6.6.0.2 Buffer Overflow

Exploit Title:BlazeVideo HDTV Player Standard 6.6.0.2 SEH Buffer Overflow Date: 19-03-2013 Exploit Author: metacom RST Vendor Homepage: http://www.blazevideo.com/hdtv-player/ Download version 6.6.0.2: www.blazevideo.com/download.php?product=blazevideo-hdtv-std Version: BlazeVideo HDTV Player...

BlazeVideo HDTV Standard v.6.6.0.2 SEH Buffer Overflow

Exploit for windows platform in category dos / poc Exploit Title:BlazeVideo HDTV Player Standard 6.6.0.2 SEH Buffer Overflow Date: 19-03-2013 Exploit Author: metacom RST Vendor Homepage: http://www.blazevideo.com/hdtv-player/ Download version 6.6.0.2:...

Galil RIO-47100 Improper Input Validation

Overview This advisory provides mitigation details for a vulnerability affecting the Galil RIO-47100 “Pocket PLC.” Researcher Jon Christmas of Solera Networks has identified an improper validation vulnerability in the Galil RIO-47100 PLC, which can result in a loss of availability. Galil has...

DoS vulnerability in Siemens S7-1200 PLCs

Hi all, I have found a DoS vulnerability in the Siemens S7-1200 PLCs. It is present in firmware versions 2 and 3. After an exchange of specially crafted packets to TCP port 102 the PLC shuts down. The red, green and yellow status LEDs start flashing. All outputs are shut off. The device stops...

CVE-2012-4690

Rockwell Automation Allen-Bradley MicroLogix controller 1100, 1200, 1400, and 1500; SLC 500 controller platform; and PLC-5 controller platform, when Static status is not enabled, allow remote attackers to cause a denial of service via messages that trigger modification of status bits...

CVE-2012-4690

The CVE-2012-4690 vulnerability affects Rockwell Automation Allen-Bradley MicroLogix devices (1100/1200/1400/1500) and the SLC 500 and PLC‑5 controller platforms. When Static status is not enabled, attackers can remotely send crafted messages that modify status bits, causing the controller to fau...

CODESYS PLC Runtime Service Detection

Binary data scadacodesysdetection.nbin...

Cross site scripting

Cross-site scripting XSS vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URI...

CVE-2012-3040

CVE-2012-3040 affects Siemens SIMATIC S7-1200 PLCs (web server) 2.x–3.0.1. The root cause is improper input neutralization in the web application (CWE-79), allowing remote attackers to inject arbitrary web script or HTML via a crafted URI. Impact described as enabling attacker-controlled JavaScri...

Siemens SIMATIC S7-1200 PLC Detection

Detection of Siemens SIMATIC S7-1200 PLC. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Siemens SIMATIC S7-1200 PLC 'web server' Component XSS Vulnerability (SSA-279823)

Siemens SIMATIC S7-1200 devices are prone to a cross-site scripting XSS vulnerability because they fail to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Optima PLC APIFTP Server Denial of Service Vulnerabilities

Optima PLC APIFTP Server is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-5049

APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed packet...

CVE-2012-5048

APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted packet...

Null pointer dereference

APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted packet...

CVE-2012-5048

APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted packet...

CVE-2012-5049

CVE-2012-5049 concerns the Optima PLC APIFTP Server. Public docs describe a denial-of-service vulnerability: a malformed packet can trigger a loop that consumes CPU, potentially crashing the server. The issue is tied to the APIFTP component in Optimalog Optima PLC 1.5.2 and earlier. Related OpenV...

CVE-2012-5048

CVE-2012-5048 affects Optima PLC APIFTP Server in Optima PLC 1.5.2 and earlier, enabling remote denial of service via a crafted packet that triggers a NULL pointer dereference and daemon crash. The OpenVAS entry and ICS-CERT advisory corroborate a DoS impact, with CVSS v2 base score 7.8. Mitigati...