Pwn2Own Miami Contestants Haul in $180K for Hacking ICS Equipment

The very first Pwn2Own hacking competition that exclusively focuses on the industrial control systems ICS has kicked off in Miami. So far, a total of $180,000 has been awarded for pwning five different products. The contest hosts at Trend Micro’s Zero Day initiative ZDI have allocated more than...

CVE-2019-16871

Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution as SYSTEM via the Beckhoff ADS protocol...

CVE-2019-16871

Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution as SYSTEM via the Beckhoff ADS protocol...

CVE-2019-16871

Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution as SYSTEM via the Beckhoff ADS protocol...

CVE-2019-16871

CVE-2019-16871 affects Beckhoff Embedded Windows PLCs up to version 3.1.4024.0 and Beckhoff TwinCAT on Windows Engineering stations. The vulnerability enables Remote Code Execution as SYSTEM via the Beckhoff ADS protocol. The provided sources describe the impact but do not specify the underlying ...

CVE-2019-18269

Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability...

Design/Logic Flaw

Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability...

CVE-2019-18269

CVE-2019-18269 affects Omron CS and CJ series PLCs. The vulnerability is an unrestricted externally accessible lock, allowing remote interaction with PLCs (ICSA-19-346-02 indicates remote exploitation risk). Affected products are CS and CJ series PLCs (all versions), per multiple sources, with th...

CVE-2019-18269

Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability...

Siemens Simatic Improper Access Control

A vulnerability has been identified in SIMATIC CP 1626 All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC incl. SIPLUS variants All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions = 20.8, SIMATIC ET200SP incl. SIPLUS variants Open Controller...

CVE-2019-6851

A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum all firmware versions, which could cause the disclosure of information from the controller when using TFTP protocol...

Design/Logic Flaw

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum all firmware versions, which could cause the disclosure of information when transferring applications to the controller using Modbus TCP protocol...

CVE-2019-6851

Schneider Electric Modicon M580 series PLCs are affected by CVE-2019-6851 (CWE-538) via the TFTP server, enabling unauthenticated disclosure of sensitive files. Affected devices include Modicon M580 and older Modicon controllers (M340, Premium, Quantum) across all firmware versions as described b...

CVE-2019-6851

A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum all firmware versions, which could cause the disclosure of information from the controller when using TFTP protocol...

Operational Technology Networks or OT

Operational Technology Networks or OT Notes: It’s mixing up OT with maritime, so probably isn’t suitable as is. The first section is really good, very relevant. We can use all of that. Once we get in to NMEA data, then it goes off topic. I suggest: Network equipment such as the Scalance Then a...

Denial of Service Vulnerability in MITSUBISHI PLCs

MITSUBISHI PLC is a programmable controller product of Mitsubishi Electric Japan. A denial of service vulnerability exists in MITSUBISHI PLC, which can be exploited by an attacker to cause a denial of service...

'URGENT/11' Critical Infrastructure Bugs Threaten EternalBlue-Style Attacks

UPDATE A cadre of 11 vulnerabilities, six of them critical remote code-execution RCE bugs, have been uncovered that affect millions of critical infrastructure systems, such as SCADA gear at utilities, elevator and industrial controllers, patient monitors and MRI machines, programmable logic...

Siemens SIMATIC S7-1500 PLCs < v2.5 Multiple DoS (ICSA-19-036-04)

Binary data 720269.prm...

How Will Companies Deploy Industrial IoT Security Solutions?

Industrial IoT IIoT devices will comprise the majority of the billions of IoT devices deployed over the next decade. How will the information security market meet this onslaught of technology? The consumer market is not a useful guide for this analysis. Consumers buy in small quantities and choos...

CVE-2018-7842

A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause an elevation of privilege by conducting a brute force attack on Modbus parameters sent to the controller...