PT-2018-16960

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA versions prior to V8.2 20170817 Description A SQL Injection issue was discovered in the software. It does not properly sanitize its inputs for SQL commands, which can lead to information disclosure. The issue is relat...

PT-2018-16961

Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA versions prior to V8.2 20170817 Description A Path Traversal issue allows an attacker to have read access to files within the directory structure of the target device. This issue can potentially lead to remote code...

Advantech WebAccess/SCADA Directory Traversal Vulnerability

Advantech WebAccess is a browser-based HMI software package for human machine interfaces, as well as monitoring and data acquisition SCADA. A directory traversal vulnerability exists in Advantech WebAccess/SCADA, which can be exploited by an attacker to read files in the directory structure of a...

Advantech WebAccess/SCADA

CVSS v3 5.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Advantech Equipment: WebAccess/SCADA Vulnerabilities: Path Traversal, SQL Injection AFFECTED PRODUCTS The following versions of WebAccess/SCADA, a SCADA software platform, are affected: WebAccess/SCADA versions prior ...

OWASP-Nettacker - Automated Penetration Testing Framework

OWASP Nettacker project is created to automate information gathering, vulnerability scanning and eventually generating a report for networks, including services, bugs, vulnerabilities, misconfigurations, and other information. This software will utilize TCP SYN, ACK, ICMP and many other protocols...

January 12, 2017 – Morning Cyber Coffee Headlines – “Martin Luther King Jr.” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 12, 2018 - Headlines Carbon Black in the News: Intel CEO releases...

Information Disclosure Vulnerability in Taiwan Tibbo Group AggreGate SCADA-HMI Industrial Software

AggreGate SCADA/HMI is a system for visualizing and operating processes, production flows, machines and equipment. It is a multi-user distributed solution that provides monitoring and surveillance for many industries. An information disclosure vulnerability exists in Taiwan Tibbo Group's AggreGat...

Ecava IntegraXor SQL Injection Vulnerability (CNVD-2017-37693)

Ecava IntegraXor is a toolset for creating and running human-machine interfaces for Web-based SCADA systems. Ecava IntegraXor suffers from a SQL injection vulnerability that can be exploited by an attacker to compromise an application, access or modify data, or exploit a potential vulnerability i...

Ecava IntegraXor

CVSS v3 5.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Ecava Equipment: IntegraXor Vulnerabilities: SQL Injection AFFECTED PRODUCTS The following version of IntegraXor, a web SCADA/HMI solution, is affected: Ecava IntegraXor v 6.1.1030.1 and prior. IMPACT Successful...

Distributed Network Protocol (DNP3) Detection

A Distributed Network Protocol DNP3 Service is running at this host. DNP3 Distributed Network Protocol is a set of communications protocols used between components in process automation systems. DNP3 has become widely utilized in adjacent industries such as water/waste water, transportation and t...

Geovap Reliance SCADA XSS Vulnerability

Geovap Reliance SCADA is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Geovap Reliance SCADA Detection (HTTP)

This scripts sends an HTTP GET request to figure out whether a Geovap Reliance SCADA system is installed on the target host, and, if so, which version. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2017-16721

A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerability could allow an unauthenticated attacker to inject arbitrary code...

Cross site scripting

A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerability could allow an unauthenticated attacker to inject arbitrary code...

CVE-2017-16721

A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerability could allow an unauthenticated attacker to inject arbitrary code...

CVE-2017-16721

Geovap Reliance SCADA is affected by CVE-2017-16721, an XSS vulnerability in versions 4.7.3 Update 2 and prior. An unauthenticated attacker could inject arbitrary code via a crafted URL, potentially enabling read/write access in the affected system. ICS-CERT reports a fixed version 4.7.3 Update 3...

CVE-2017-16721

A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerability could allow an unauthenticated attacker to inject arbitrary code...

CVE-2017-16721: Improper Neutralization of Input During Web Page Generation

A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerability could allow an unauthenticated attacker to inject arbitrary code...

PT-2017-14532

Name of the Vulnerable Software and Affected Versions Geovap Reliance SCADA versions prior to 4.7.3 Update 2 Description A Cross-site Scripting issue was discovered that could allow an unauthenticated attacker to inject arbitrary code. Recommendations For versions prior to 4.7.3 Update 2, update ...

Geovap Reliance SCADA Cross-Site Scripting Vulnerability

Reliance is a professional SCADA/HMI system designed for the visualization and control of industrial processes as well as building and home automation. A cross-site scripting vulnerability exists in Geovap Reliance SCADA that allows an unauthenticated attacker to inject arbitrary code...