KingView 6.5.3 SCADA Active-X

Exploit Title: KingView 6.5.3 SCADA ActiveX Date: March 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://download.kingview.com/software/kingview%20English%20Version/kingview6.53EN.rar Version: 6.53 English Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox...

KingView 6.5.3 SCADA - ActiveX

Exploit Title: KingView 6.5.3 SCADA ActiveX Date: March 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://download.kingview.com/software/kingview%20English%20Version/kingview6.53EN.rar Version: 6.53 English Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox...

KingView 6.5.3 SCADA - ActiveX

KingView 6.5.3 SCADA - ActiveX Exploit Title: KingView 6.5.3 SCADA ActiveX Date: March 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://download.kingview.com/software/kingview%20English%20Version/kingview6.53EN.rar Version: 6.53 English Tested on: Windows xp sp3 running on VMwa...

Stack overflow

Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute arbitrary code via a crafted .csv file, related to a status log message...

CVE-2010-4740

Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute arbitrary code via a crafted .csv file, related to a status log message...

CVE-2010-4740

CVE-2010-4740 describes a stack-based buffer overflow in WTclient.dll of SCADA Engine’s BACnet OPC Client prior to 1.0.25, enabling a user‑assisted remote attacker to execute arbitrary code by processing a specially crafted .csv file. Public references confirm the vulnerability affects SCADA Engi...

PT-2011-1690

Name of the Vulnerable Software and Affected Versions SCADA Engine BACnet OPC Client versions prior to 1.0.25 Description The issue is related to a stack-based buffer overflow in the WTclient.dll component, which can be exploited by remote attackers through a crafted .csv file. This exploitation ...

CVE-2010-4740: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute arbitrary code via a crafted .csv file, related to a status log message...

CVE-2010-4733

WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms have a default username and password, which makes it easier for remote attackers to obtain superadmin access via the web interface, a...

SCADA Engine BACnet OPC Client buffer overflow vulnerability

Overview SCADA Engine BACnet OPC Client contains a buffer overflow when parsing .csv files. This vulnerability may allow an attacker to execute arbitrary code. Description According to SCADA Engine website: "The SCADA Engine BACnet OPC Server is a server that provides data access DA, Alarms and...

Sielco Sistemi Winlog server stack overflow

Overview Sielco Sistemi Winlog TCP/IP server contains a stack overflow vulnerability Description According to Sielco Sistemi's website: "Winlog is a software package for SCADA/HMI applications with web support, OPC client and a wide library of communication drivers and protocols for most PLCs...

Week in Security: Chinese SCADA Miscommunication and Botnets 2011: The Return

The specter of Stuxnet reared its head again this week, with news of a critical hole in some Chinese SCADA software, while, elsewhere, botnets reloaded following a holiday break, and patches from Microsoft, Google and RIM made headlines. Read on for the full week in review. At the top of the news...

Sielco Sistemi Winlog 2.07.00 - Stack Overflow

Source: http://aluigi.org/adv/winlog1-adv.txt Luigi Auriemma Application: Sielco Sistemi Winlog http://www.sielcosistemi.com/en/products/winlogscadahmi/ Versions: Options-TCP/IP" section of the project we want to run and Runtime.exe will listen on the TCP port 46823. The opcode 0x02 of the protoc...

Sielco Sistemi Winlog 2.07.00 - Stack Overflow

Sielco Sistemi Winlog 2.07.00 - Stack Overflow Source: http://aluigi.org/adv/winlog1-adv.txt Luigi Auriemma Application: Sielco Sistemi Winlog http://www.sielcosistemi.com/en/products/winlogscadahmi/ Versions: Options-TCP/IP" section of the project we want to run and Runtime.exe will listen on th...

China CERT: We Missed Report On SCADA Hole

China’s Computer Emergency Response Team CERT admitted that it missed a September e-mail message from a researcher at NSS Labs that pointed out a critical vulnerability in a commonly used SCADA Supervisory Control And Data Acquisition software package. The lapse resulted in a gap of almost four...

Researcher: Holes Abound in Chinese SCADA

The researcher who discovered a hole in a prominent SCADA software package used in China claims that holes in the country’s SCADA systems aren’t uncommon, and blames a lack of transparency for the vulnerabilities. A security researcher at NSS Labs who disclosed a critical vulnerability in a popul...

Ecava IntegraXor web service allows directory traversal outside of web root

Overview Ecava IntegraXor contains a directory traversal vulnerability Description According to Ecava's website: IntegraXor is a suite of tools used to create and run a web-based HMI interface for a Supervisory Control and Data Acquisition SCADA system. Ecava IntegraXor runs a web service that...

China Sleeps On A Stuxnet-Like SCADA Bug

One of the most widely used SCADA supervisory control and data acquisition applications in China may be harboring a critical security vulnerability that could allow an attacker to exploit the bug and execute arbitrary code. The hole was discovered in an application produced by Wellintech, a Beiji...

KingView 6.53 SCADA HMI Heap Overflow

Exploit Title: KingView 6.53 SCADA HMI Heap Overflow PoC Date: 9/28/2010 Author: Dillon Beresford Software Link: http://download.kingview.com/software/kingview%20English%20Version/kingview6.53EN.rar Version: 6.53 English Tested on: Windows XP SP1 works on SP2 and SP3 will release new targets afte...

KingView 6.5.3 SCADA HMI Heap Overflow PoC

Exploit for windows platform in category remote exploits Author: Dillon Beresford Software Link: http://download.kingview.com/software/kingview%20English%20Version/kingview6.53EN.rar Version: 6.53 English Tested on: Windows XP SP1 works on SP2 and SP3 will release new targets after CERT advisory ...