SOC Forum 2017: How I Learned to Stop Worrying and Love Massive Malware Attacks

Today I spoke at SOC Forum 2017 in Moscow. It was a great large-scale event about Security Operation Centers. 2,700 people registered. Lots of people in suits . And lots of my good fellows. The event was held in Radisson Royal Congress Park. There were three large halls for presentations and a hu...

Intel Confirms Its Much-Loathed ME Feature Has A Kill Switch

Researchers at Positive Technologies forced Intel’s hand at revealing that a previously undocumented kill switch exists for its oft-criticized Intel Management Engine, a remote management component of Intel CPUs. Initially, Positive Technologies set out to disable the feature that some security...

Hidden Kill Switch Identified in Controversial Intel ME controller chip

By Uzair Amir Europe’s leading cyber-security firm Positive Technologies’ security researchers have a This is a post from HackRead.com Read the original post: Hidden Kill Switch Identified in Controversial Intel ME controller chip...

PT-2018-02: Improper Authorization in PHOENIX CONTACT FL SWITCH

The specialists of the Positive Research center have detected an Improper Authorization vulnerability in PHOENIX CONTACT FL SWITCH. An Improper Authorization issue in PHOENIX CONTACT FL SWITCH products allows remote unauthenticated attackers to bypass web-service authentication and obtain...

PT-2018-01: Information Exposure in PHOENIX CONTACT FL SWITCH

The specialists of the Positive Research center have detected an Information Exposure vulnerability in PHOENIX CONTACT FL SWITCH. An Information Exposure issue in PHOENIX CONTACT FL SWITCH products allows remote unauthenticated attackers to read diagnostic information using Monitor Mode on the...

PT-2017-56: Cross-Site Scripting in Kaspersky Security Center 10

The specialists of the Positive Research center have detected a Cross-Site Scripting in Kaspersky Security Center 10. DOM-based cross-site scripting vulnerability in the Web Console for Kaspersky Security Center 10 allows unauthorized attackers to access some product functionality and execute...

PT-2017-12: Buffer Overflow in Intel Management Engine

The specialists of the Positive Research center have detected a Buffer Overflow vulnerability in Intel Management Engine. Multiple buffer overflows in Intel Manageability Engine Firmware, Server Platform Services Firmware, and Trusted Execution Engine Firmware allow attackers with local access to...

PT-2018-33: Arbitrary Code Execution in NCR S2

The specialists of the Positive Research center have detected an Arbitrary Code Execution vulnerability in NCR S2. Vulnerability in the NCR S2 Dispenser controller, related to insufficient protection of the memory write mechanism, allows unauthenticated, remote attackers to execute arbitrary code...

PT-2018-31: XXE Injection in Cisco Secure ACS

The specialists of the Positive Research center have detected an XXE Injection vulnerability in Cisco Secure ACS. A vulnerability in the web-based user interface of the Cisco Secure Access Control Server, due to improper handling of XML External Entities XXEs when parsing an XML file, could allow...

PT-2017-13: Elevation of Privilege in Microsoft Windows

The specialists of the Positive Research center have detected an Elevation of Privilege vulnerability in Microsoft Windows. An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully...

PT-2018-18: Buffer Overflow in Schneider Electric's Modicon Premium, Modicon Quantum, and Modicon M340

The specialists of the Positive Research center have detected a Buffer Overflow vulnerability in Schneider Electric's Modicon Premium, Modicon Quantum, and Modicon M340. A buffer overflow vulnerability, due to the length of the source string specified as the number of bytes to be copied instead o...

PT-2018-20: Arbitrary Code Execution in Schneider Electric's BMXNOR0200

The specialists of the Positive Research center have detected an Arbitrary Code Execution vulnerability in Schneider Electric's BMXNOR0200. A vulnerability in the HTTP request parser allows remote attackers to execute arbitrary code. How to fix Use the vendor's advisory:...

PT-2018-21: Buffer Overflow in Schneider Electric's Modicon Premium, Modicon Quantum, and Modicon M340

The specialists of the Positive Research center have detected a Buffer Overflow vulnerability in Schneider Electric's Modicon Premium, Modicon Quantum, and Modicon M340. A vulnerability in the web services to process SOAP requests allows attackers to trigger a buffer overflow. How to fix Use the...

PT-2018-10: Server-Side Request Forgery in Ipswitch WhatsUp Gold

The specialists of the Positive Research center have detected a Server-Side Request Forgery vulnerability in Ipswitch WhatsUp Gold. A server-side request forgery vulnerability in NmAPI.exe in Ipswitch WhatsUp Gold allows attackers to gain unauthorized access to the WhatsUp Gold system, obtain...

PT-2018-06: Authentication Bypass in Hirschmann Automation and Control GmbH Classic Platform Switches

The specialists of the Positive Research center have detected an Authentication Bypass vulnerability in Hirschmann Automation and Control GmbH Classic Platform Switches. Vulnerability in the web interface of Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic...

PT-2017-07: Session Fixation in Hirschmann Automation and Control GmbH Classic Platform Switches

The specialists of the Positive Research center have detected a Session Fixation vulnerability in Hirschmann Automation and Control GmbH Classic Platform Switches. A session fixation vulnerability in the web interface of Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS...

PT-2017-09: Information Disclosure in Hirschmann Automation and Control GmbH Classic Platform Switches

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Hirschmann Automation and Control GmbH Classic Platform Switches. A cleartext transmission of information vulnerability in the web interface of Belden Hirschmann RS, RSR, RSB, MACH100, MACH100...

PT-2018-41: Server-Side Request Forgery in SAP NetWeaver Knowledge Management Configuration Service

The specialists of the Positive Research center have detected a Server-Side Request Forgery vulnerability in SAP NetWeaver Knowledge Management Configuration Service. A server-side request forgery SSRF vulnerability in SAP NetWeaver Knowledge Management Configuration Service, EPBC and EPBC2 allow...

PT-2018-39: Cross-Site Scripting in SAP Business Warehouse Universal Data Integration

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in SAP Business Warehouse Universal Data Integration. A cross-site scripting XSS vulnerability in SAP Business Warehouse Universal Data Integration, due to insufficient encoding of user input, allow...

PT-2017-10: Information Disclosure in Hirschmann Automation and Control GmbH Classic Platform Switches

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Hirschmann Automation and Control GmbH Classic Platform Switches. Vulnerability in the web interface of Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic...