4134 matches found
Integer overflow
Integer overflow in CimWebServer.exe in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to cause a denial of service daemon crash via a malformed HTTP request...
CVE-2012-4689
Ge GE Intelligent Platforms Proficy CIMPLICITY CIMPLICITY CIMPLICITY CIMPLICITY built-in Web server CimWebServer.exe is affected by a remote denial-of-service due to an integer overflow when processing malformed HTTP requests. Affected products include CIMPLICITY versions 4.01 through 8.0 and Pro...
PT-2013-1694
Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY versions 4.01 through 8.0 Proficy Process Systems with CIMPLICITY versions 4.01 through 8.0 Description The issue is related to an integer overflow in CimWebServer.exe, which can be...
CVE-2012-4689: Undefined Security Weakness
Integer overflow in CimWebServer.exe in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to cause a denial of service daemon crash via a malformed HTTP request...
Malware Infects Two Power Plants Lacking Basic Security Controls
During the past three months, unnamed malware infected two power plants’ control systems using unprotected USB drives as an attack vector. At both companies, a lack of basic security controls made it much easier for the malicious code to reach critical networks. In one instance, according to a...
Canary Labs Inc Trend Link Insecure ActiveX Control Method
Overview This advisory provides mitigation details for a vulnerability in the Canary Labs, Inc. Trend Link software. Researcher Kuang-Chun Hung of Security Research and Service Institute−Information and Communication Security Technology Center ICST has identified an insecure ActiveX control metho...
Advantech Webaccess HMISCADA Software - Persistence Cross-Site Scripting
Advantech Webaccess HMISCADA Software - Persistence Cross-Site Scripting Title : Advantech WebAccess HMI/SCADA Software Persistence Cross-Site Scripting Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://webaccess.advantech.com/ Advisory :...
Advantech WebAccess HMI/SCADA Cross Site Scripting
Title : Advantech WebAccess HMI/SCADA Software Persistence Cross-Site Scripting Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://webaccess.advantech.com/ Advisory : http://secpod.org/blog/?p=569...
Advantech WebAccess HMI/SCADA Software Persistence XSS Vulnerability
Advantech WebAccess HMI/SCADA software version 7.0-2012.12.05 suffers from a persistent cross site scripting vulnerability. Title : Advantech WebAccess HMI/SCADA Software Persistence Cross-Site Scripting Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor :...
Advantech Webaccess HMI/SCADA Software - Persistence Cross-Site Scripting
Title : Advantech WebAccess HMI/SCADA Software Persistence Cross-Site Scripting Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://webaccess.advantech.com/ Advisory : http://secpod.org/blog/?p=569...
Schneider Modicon SCADA Ladder Logic Upload/Download
A vulnerability has been reported in Schneider Electric Modicon Quantum. The vulnerability is due to the use of unauthenticated administrative function...
SCADA Modbus Client Utility Write Single Register
A vulnerability has been reported in Modbus Client Utility. The vulnerability is due to unauthenticated use of the Write Single Register command...
Schneider Modicon SCADA Remote START/STOP Command
A vulnerability has been reported in Schneider Electric Modicon Quantum. The vulnerability is due to the use of unauthenticated administrative function...
Stuxnet is Back ! Iran reported another cyber attack
Iran claims to have repelled a fresh cyber attack on its industrial units in a southern province. In the last few years, various Iranian industrial, nuclear and government bodies have recently come under growing cyber attacks, widely believed to be designed and staged by the US and Israel. A powe...
Stuxnet is Back ! Iran reported another cyber attack
Iran claims to have repelled a fresh cyber attack on its industrial units in a southern province. In the last few years, various Iranian industrial, nuclear and government bodies have recently come under growing cyber attacks, widely believed to be designed and staged by the US and Israel. A powe...
SCADA Siemens FactoryLink vrn.exe Opcode 9 Buffer Overflow
A stack buffer overflow in FactoryLink 7.5, 7.5 SP2, and 8.0.1.703. An attacker may be able to execute arbitrary code...
SCADA Schneider Modicon Quantum Password Recovery
...
Ecava IntegraXor ActiveX Directory Traversal
Overview Independent researchers Billy Rios and Terry McCorkle have identified a Path Traversal vulnerability in the Ecava IntegraXor application. Ecava has produced an update that mitigates this vulnerability. The researchers have validated that the patch fixes this vulnerability. Affected...
7-Technologies IGSS 9 IGSSdataServer.exe Denial of Service (CVE-2011-4050)
A buffer overflow vulnerability has been reported in SCADA IGSS Data Server IGSSdataServer.exe...
Hunting vulnerabilities in SCADA systems, we are still too vulnerable to cyber attacks
Stuxnet case is considered by security expert the first concrete act of cyber warfare, a malware specifically designed to hit SCADA systems inside nuclear plants in Iran. The event has alerted the international security community on the risks related to the effects of a cyber attack against...