4119 matches found
CVE-2019-3953
CVE-2019-3953 affects Advantech WebAccess/SCADA 8.4.0. A stack-based buffer overflow exists when handling IOCTL 10012 RPC calls, allowing a remote, unauthenticated attacker to execute arbitrary code. The entry is corroborated by multiple sources (NVD and national/national vulnerability databases)...
PT-2019-16802
Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA version 8.4.0 Description A stack-based buffer overflow issue allows a remote, unauthenticated attacker to execute arbitrary code by sending a crafted IOCTL 10012 RPC call. Recommendations For Advantech WebAccess/SCAD...
PT-2019-16803
Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA version 8.4.0 Description A stack-based buffer overflow issue allows a remote, unauthenticated attacker to execute arbitrary code by sending a crafted IOCTL 81024 RPC call. Recommendations For Advantech WebAccess/SCAD...
CVE-2019-3953: Out-of-bounds Write
Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.0 allows a remote, unauthenticated attacker to execute arbitrary code by sending a crafted IOCTL 10012 RPC call...
CVE-2019-3954: Out-of-bounds Write
Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.0 allows a remote, unauthenticated attacker to execute arbitrary code by sending a crafted IOCTL 81024 RPC call...
Siemens SCALANCE X (Update B)
1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: SCALANCE X Switches Vulnerability: Storing Passwords in a Recoverable Format 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-19-162-04 Siemens SCALANCE X...
AVEVA Vijeo Citect and CitectSCADA
1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Low skill level to exploit Vendor: AVEVA Equipment: Vijeo Citect and CitectSCADA Vulnerability: Insufficiently Protected Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a locally authenticated user to obtain...
Rockwell Automation MicroLogix 1100/1400 and CompactLogix 5370 Controllers Open Redirection Vulnerability
The Rockwell Automation MicroLogix 1100/1400 or CompactLogix 5370 controller web server is affected by an open redirect vulnerability. An unauthenticated remote attacker can exploit this issue in conjunction with a social engineering attack to redirect the user to a malicious site that could run ...
SEL AcSELerator Architect 2.2.24 Denial Of Service
!/usr/bin/env python coding: utf8 SEL AcSELerator Architect 2.2.24 Remote CPU Exhaustion Denial of Service Vendor: Schweitzer Engineering Laboratories, Inc. Product web page: https://www.selinc.com Affected version: 2.2.24.0 ICD package version: 2.38.0 Summary: Substation communications networks...
Multiple Siemens products vulnerable to encryption issues
Siemens SIMATIC WinCC is an automated data acquisition and monitoring SCADA system, Siemens SIMATIC HMI Comfort Panels is a touch panel device, Siemens SIMATIC HMI Comfort Outdoor Panels is a touch panel device for outdoor use, and Siemens SIMATIC HMI Comfort Outdoor Panels is a touch panel devic...
Vulnerabilities in Permissions and Access Control Issues for Multiple Siemens Products
Siemens SIMATIC WinCC is an automated data acquisition and monitoring SCADA system, Siemens SIMATIC HMI Comfort Panels is a touch panel device, Siemens SIMATIC HMI Comfort Outdoor Panels is a touch panel device for outdoor use, and Siemens SIMATIC HMI Comfort Outdoor Panels is a touch panel devic...
Schweitzer Engineering Laboratories Unmanaged 24-Port Ethernet Switch Detection
Binary data 755349.prm...
Omron CK3E-1210 PLC Detection
Binary data 756153.prm...
Schweitzer Engineering Laboratories Pump Automation Controller PLC Detection
Binary data 755334.prm...
Schweitzer Engineering Laboratories Programmable Automation Controller PLC Detection
Binary data 755333.prm...
Extinguishing the IoT Insecurity Dumpster Fire
It’s no secret IoT security has been a dumpster fire. Last week, it was reported two million IP security cameras, baby monitors and smart doorbells have serious IoT flaws with no known patches. The list, of course, is added to a long list of IoT nightmares that have been reported over the past fi...
Siemens SIMOCODE Pro V EIP Detection (SCADA)
Binary data 700525.prm...
Siemens SIMOCODE Pro V EIP Detection Version Detection (SCADA)
Binary data 700526.prm...
Stack overflow
Advantech WebAccess/SCADA, Versions 8.3.5 and prior. Multiple stack-based buffer overflow vulnerabilities, caused by a lack of proper validation of the length of user-supplied data, may allow remote code execution...
