4132 matches found
Motorola MOSCAD SCADA IP Gateway Vulnerabilities
OVERVIEW Independent researcher Aditya K. Sood has identified Remote File Inclusion RFI and Cross-Site Request Forgery CSRF vulnerabilities in Motorola Solutions’ MOSCAD IP Gateway. Motorola Solutions has confirmed this product was cancelled at the end of 2012 and no longer offer software updates...
Open Automation Software OPC Systems NET DLL Hijacking Vulnerability
OVERVIEW Ivan Sanchez from Nullcode Team has identified a DLL Hijacking vulnerability in Open Automation Software’s OPC Systems.NET application. Open Automation Software has reviewed the vulnerability and determined not to patch the issue at this time. This vulnerability could be exploited remote...
Advantech Webaccess 8.0 3.4.3 - ActiveX Multiple Vulnerabilities
Advantech Webaccess 8.0 3.4.3 - ActiveX Multiple Vulnerabilities Introduction Using Advantech WebAccess SCADA Software we can remotely manage Industrial Control systems devices like RTU's, Generators, Motors etc. Attackers can execute code remotely by passing maliciously crafted string to...
Advantech WebAccess 8.0, 3.4.3 ActiveX - Multiple Vulnerabilities
Exploit for windows platform in category dos / poc Introduction Using Advantech WebAccess SCADA Software we can remotely manage Industrial Control systems devices like RTU's, Generators, Motors etc. Attackers can execute code remotely by passing maliciously crafted string to ConvToSafeArray API i...
Advantech Webaccess 8.0 / 3.4.3 - ActiveX Multiple Vulnerabilities
Introduction Using Advantech WebAccess SCADA Software we can remotely manage Industrial Control systems devices like RTU's, Generators, Motors etc. Attackers can execute code remotely by passing maliciously crafted string to ConvToSafeArray API in ASPVCOBJLib.AspDataDriven ActiveX. Operating...
Siemens SIMATIC S7-1200 PLC < 4.1.3 XSRF
Binary data scadasiemenssimatics71200plcSSA-134003.nbin...
KAKO HMI Hardcoded Password Security Bypass Vulnerability
KAKO HMI is a Scada HMI. The KAKO HMI has a built-in hard-coded password that allows a remote attacker to exploit a vulnerability to bypass authentication mechanisms and gain access to affected devices...
Schneider Electric Modicon M340 PLC Station P34 Module HMI Vulnerabilities
Update Vulnerabilities in Schneider Electric SCADA gear remain unpatched close to two weeks after they were disclosed during DEF CON. The Industrial Control System Cyber Emergency Response Team ICS-CERT released an alert late last week and patches are currently being validated according to ICS-CE...
PT-2015-3317
Name of the Vulnerable Software and Affected Versions General Electric GE Proficy HMI/SCADA iFIX versions 5.8 SIM 13 and prior General Electric GE Proficy HMI/SCADA CIMPLICITY versions 9.0 and prior General Electric GE Proficy Historian versions 6.0 and prior Description The issue allows an...
IniNet Solutions SCADA Web Server Vulnerabilities
OVERVIEW Kirill Nesterov and Aleksandr Timorin of Positive Technologies have identified three vulnerabilities in IniNet Solutions GmbH’s SCADA Web Server. IniNet Solutions GmbH has produced a new version that mitigates these vulnerabilities. These vulnerabilities could be exploited remotely...
Schneider Electric SCADA Expert ClearSCADA 2005 / 2007 / 2009 < 2009 R1.4 and R2.3 XSS
Binary data 8756.prm...
Schneider Electric SCADA Expert ClearSCADA 2005 / 2007 / 2009 < 2009 R2.4 / 2010 < 2010 R1.1 Remote Authentication Bypass
Binary data 8610.prm...
Rockwell Automation MicroLogix 1100 PLC Web Server Detection
Binary data scadarockwellmicrologix1100plcwebserverdetect.nbin...
Siemens SIMATIC ProSave < 1300.100.2201.15 Untrusted Path Arbitrary Code Execution (SSA-451236)
Binary data scadasiemenssimaticprosaveSSA-451236.nbin...
Siemens SIMATIC ProSave Detection
Binary data scadaappsiemenssimaticprosavedetect.nbin...
IBC Solar ServeMaster Source Code Vulnerability
OVERVIEW Independent researcher Maxim Rupp has identified three vulnerabilities in IBC Solar products. The vulnerabilities are disclosure of applications source code, plain text passwords, and cross site scripting. IBC Solar has not produced a patch to mitigate these vulnerabilities. These...
SA98 : OpenSSL Security Advisory 11-June-2015
SUMMARY Blue Coat products using affected versions of OpenSSL 1.0.2, 1.0.1, 1.0.0, and 0.9.8 are vulnerable to multiple vulnerabilities. A remote attacker may exploit these vulnerabilities to cause a denial of service, memory corruption, application crash, or downgrade in the Diffie-Hellman...
Inductive Automation Ignition Detection
Binary data scadaappinductiveautomationignitiondetect.nbin...
Eisbar SCADA (All Versions - iOS, Android & W8) - Persistent UI Vulnerability
Document Title: =============== Eisbar SCADA All Versions - iOS, Android & W8 - Persistent UI Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1456 Release Date: ============= 2015-05-19 Vulnerability Laboratory ID VL-ID:...
ESC 8832 Data Controller - Multiple Vulnerabilities
ESC 8832 Data Controller - Multiple Vulnerabilities =begin Exploit Title: ESC 8832 Data Controller multiple vulnerabilities Date: 2014-05-29 Platform: SCADA / Web Application Exploit Author: Balazs Makany Vendor Homepage: www.envirosys.com Version: ESC 8832 Data Controller Hardware Tested on: ESC...