PT-2014-2010

Name of the Vulnerable Software and Affected Versions Schneider Electric StruxureWare SCADA Expert Vijeo Citect versions 7.40 Schneider Electric Vijeo Citect versions 7.20 through 7.30SP1 Schneider Electric CitectSCADA versions 7.20 through 7.30SP1 Schneider Electric StruxureWare PowerSCADA Exper...

CVE-2013-2824: Undefined Security Weakness

Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to...

Mitsubishi Electric Automation MC-WorX Suite Detection

Binary data scadaappmitsubishimc-worxdetect.nbin...

Iconics GENESIS32 ActiveX控件远程代码执行漏洞

BUGTRAQ ID: 65706 CVECAN ID: CVE-2014-0758 ICONICS GENESIS32是用于商业设施、能源、食品、农业、医疗、水利的Scada产品。 GENESIS32 8.0, 8.02, 8.04, 8.05版本的GenLaunch.htm文件使用的ActiveX控件不安全，远程攻击者通过诱使用户浏览恶意网页，在未经身份验证或权限提升的情况下，即可利用此漏洞执行任意代码。 0 ICONICS GENESIS32 8.x 厂商补丁： ICONICS ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2013-2829

MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed DNP3 packet...

Code injection

MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed DNP3 packet...

CVE-2013-2829

MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed DNP3 packet...

CVE-2013-2829

The CVE-2013-2829 entry concerns MatrikonOPC SCADA DNP3 OPC Server, affected in Version 1.2.2.0 and earlier. The root cause is improper input validation (CWE-20) that may allow a remote attacker to trigger a denial-of-service condition by processing a malformed DNP3 packet, causing the server to ...

Cogent DataHub < 7.3.4 Malformed POST Request Buffer Overflow RCE

Binary data scadacogentdatahub734.nbin...

CVE-2013-2829: Improper Input Validation

MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed DNP3 packet...

PT-2014-2640

Name of the Vulnerable Software and Affected Versions MatrikonOPC SCADA DNP3 OPC Server versions 1.2.2.0 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop, by sending a malformed DNP3 packet. Recommendations For versions 1.2.2.0...

Cybersecurity Framework for U.S. Critical Infrastructure

Critical infrastructure operators have been delivered a cybersecurity framework by the U.S. government that paints broad strokes as to how to defend IT and SCADA networks in some of the country’s most sensitive industries such as energy, water and financial services. NIST today announced the...

SIEMENS SIMATIC WinCC Open Architecture拒绝服务漏洞

BUGTRAQ ID: 65347 CVECAN ID: CVE-2014-1699 Siemens SIMATIC WinCC 是监测控制和数据采集SCADA及人机界面HMI系统。 SIEMENS SIMATIC WinCC OA 3.12 P002之前版本存在安全漏洞，远程攻击者通过向端口4999发送畸形的HTTP请求，利用此漏洞即可造成拒绝服务（监控服务中断）。 0 Siemens SIMATIC WinCC Open Architecture 3.12 P002 January 厂商补丁： Siemens -------...

GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY CimWebServer.exe目录遍历漏洞

CVECAN ID: CVE-2014-0751 GE Proficy CIMPLICITY是客户端/服务器业务可视化和控制解决方案。 GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 8.2 SIM 24之前版本中，CimWebServer.exe（即组件WebView）及Proficy Process Systems在实现上存在目录遍历漏洞，远程攻击者通过向TCP端口10212发送特制的消息，利用此漏洞可执行任意代码。 0 ge-ip Proficy CIMPLICITY 8.2 SIM 24 厂商补丁： ge-ip...

TURCK BL20/BL67 Hardcoded Admin Account

Binary data scadaturckftpauth.nbin...

CVE-2014-0751

The CIMPLICITY Web-based access component, CimWebServer, does not check the location of shell files being loaded into the system. By modifying the source location, an attacker could send shell code to the CimWebServer which would deploy the nefarious files as part of any SCADA project. This could...

Directory traversal

Directory traversal vulnerability in CimWebServer.exe aka the WebView component in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted message to TCP port 10212, aka...

Directory traversal

Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-16...

CVE-2014-0750 GE Proficy HMI/SCADA Path Traversal

Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-16...

CVE-2014-0750

GE Proficy CIMPLICITY CIMPLICITY CIMPLICITY: A path traversal vulnerability (CVE-2014-0750) in gefebt.exe within the WebView CimWebServer/Proficy CIMPLICITY components allows remote code execution via crafted HTTP requests. Affected products include Proficy HMI/SCADA - CIMPLICITY (versions up to ...