PT-2017-02: Insufficient Permissions in Rockwell Automation Micrologix 1100 and 1400 PLC

The specialists of the Positive Research center have detected an Insufficient Permissions vulnerability in Rockwell Automation Micrologix 1100 and 1400 PLC. Vulnerability in Allen-Bradly MicroLogix 1100 and 1400 allows remote attackers with administrative privileges to remove all administrators...

PT-2015-17: SQL injection in Rockwell Automation Micrologix 1100 and 1400 PLC

The specialists of the Positive Research center have detected an SQL injection vulnerability in Rockwell Automation Micrologix 1100 and 1400 PLC. SQL injection vulnerability exists on Allen-Bradly MicroLogix 1100 and 1400 due to the improper sanitization of user input, which allows remote...

PT-2017-01: Information Disclosure in Rockwell Automation Micrologix 1100 and 1400 PLC

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Rockwell Automation Micrologix 1100 and 1400 PLC. Vulnerability in Allen-Bradly MicroLogix 1100 and 1400 allows remote attackers to obtain user credentials in clear text by sniffing...

PT-2016-09: Password Access in ABB PCM600

The specialists of the Positive Research center have detected a Password Access vulnerability in ABB PCM600. After you change the Main Application Password, it is stored to the configuration file as a clear text. How to fix Update your software up to the latest version Advisory status 09.06.2015 ...

PT-2016-11: Insecure Authentication Data Storage in ABB PCM600

The specialists of the Positive Research center have detected an Insecure Password Storage vulnerability in ABB PCM600. PCM600 authentication accounts are stored as ASCII hex values in the manual program DB files. An attacker can get access to PCM600. How to fix Update your software up to the...

PT-2016-08: Weak Password Hashing in ABB PCM600

The specialists of the Positive Research center have detected a Weak password hashing vulnerability in ABB PCM600. A Main Application Password in the "ACTConfig" configuration file hashed by the weak function with the hardcoded key and the initialization vector. It is easy to decrypt the password...

PT-2016-10: Insecure Password Storage in ABB PCM600

The specialists of the Positive Research center have detected an Insecure Password Storage vulnerability in ABB PCM600. The OPC Server IEC61850 authentication password is stored as a clear text in the configuration file and manual project. As a result an attacker can get access to the IEC61850...

PT-2015-15: Information Disclosure in LiteSpeed Web Server

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in LiteSpeed Web Server. This vulnerability allows attackers to obtain the content of arbitrary memory locations in LiteSpeed Web Server. The exploitation of the vulnerability makes it possible t...

PT-2016-61: Denial of Service in the web interface to TP-Link wireless devices control system

The specialists of the Positive Research center have detected a Denial of Service vulnerability in the web interface to TP-Link wireless devices control system. An attacker can cause a full denial of service of the server used for the web interface to wireless devices control system via the speci...

PT-2018-26: Information Disclosure in MatrikonOPC Explorer

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in MatrikonOPC Explorer. A vulnerability in MatrikonOPC Explorer, related to MSXML libraries, allows attackers to transfer arbitrary files from a host system and obtain sensitive information. How...

PT-2015-05: Information Disclosure in Inductive Automation Ignition

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Inductive Automation Ignition. This page contains an error/warning message that may disclose sensitive information. The message can also contain the location of the file that produced the...

PT-2015-08: Bypass Anti-Bruteforce Mechanism in Inductive Automation Ignition

The specialists of the Positive Research center have detected a Bypass Anti-Bruteforce Mechanism vulnerability in Inductive Automation Ignition. The mechanism of blocking bruteforce attacks could be bypassed with resetting session id parameter in HTTP request. The mechanism blocking bruteforce...

PT-2015-06: Information Disclosure in Inductive Automation Ignition

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Inductive Automation Ignition. OPC Server username and password stored in clear text. How to fix Update your sofware up to the latest version Advisory status 12.02.2015 - Vendor gets...

PT-2015-04: JNLP File Inclusion in Inductive Automation Ignition

The specialists of the Positive Research center have detected a JNLP File Inclusion vulnerability in Inductive Automation Ignition. Adding any symbols to users’ web request for starting Java applet allow including into jnlp file in the field indicating applet to be executed. By manipulating this...

PT-2016-13: Information Disclosure in Siemens SIMATIC STEP 7 (TIA Portal)

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Siemens SIMATIC STEP 7 TIA Portal. The vulnerability improperly stores pre-shared key data in TIA project files, which makes it easier for local users to obtain sensitive information. How to f...

PT-2015-01: SQL Injection in Solar-Log WEB

The specialists of the Positive Research center have detected an SQL injection vulnerability in Solar-Log WEB. SQL Injection vulnerability allows remote attackers to execute arbitrary SQL commands via a specially crafted request. How to fix Update your sofware up to the latest version Advisory...

Siemens SIMATIC S7-1200 Vulnerabilities

OVERVIEW Siemens, Ralf Spenneberg of OpenSource Training, Lucian Cojocar of EURECOM, Sascha Zinke from the FU Berlin’s work team SCADACS, and Positive Technologies’ researchers Alexey Osipov, and Alex Timorin have identified six vulnerabilities in the Siemens SIMATIC S7-1200 CPU family. Siemens h...

PT-2016-06: Information Disclosure in Advantech WebAccess

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Advantech WebAccess. Advantech WebAccess before 8.1 stores e-mail project accounts in clear text, which allows remote attackers to obtain sensitive information. How to fix Update your software...

PT-2016-02: Cross-Site Scripting in Advantech WebAccess

The specialists of the Positive Research center have detected a Cross-Site Scripting vulnerability in Advantech WebAccess. A Cross-site scripting XSS vulnerability exists in Advantech WebAccess before 8.1 when the web server does not properly filter user input, which allows remote authenticated...

PT-2016-01: Arbitrary File Upload in Advantech WebAccess

The specialists of the Positive Research center have detected an Arbitrary File Upload vulnerability in Advantech WebAccess. It was discovered that Advantech WebAccess before 8.1 allows remote unauthenticated users to create or write to arbitrary files on the server. How to fix Update your softwa...