Advantech WebAccess SCADA Buffer Overflow (CVE-2019-6550)

A stack-based buffer overflow vulnerability exists in Advantech WebAccess. The vulnerability is due to a lack of boundary checks while copying user-supplied data into a stack-based buffer within bwstwww.exe. Successful exploitation could lead to arbitrary code execution under context of...

Advantech WebAccess SCADA Buffer Overflow (CVE-2019-3953)

A stack buffer overflow exists in Advantech WebAccess SCADA. The vulnerability is due to improper validation of user-supplied data in the request submitted to the target server with IOCTL 10012. Successful exploitation could lead to arbitrary code execution under context of Administrator...

Open Proficy HMI-SCADA 5.0.0.25920 - (Password) Denial of Service Exploit

Exploit Title: Open Proficy HMI-SCADA 5.0.0.25920 - 'Password' Denial of Service PoC Discovery by: Luis Martinez Vendor Homepage: https://apps.apple.com/us/app/proficyscada/id525792142 Software Link: App Store for iOS devices GE Intelligent Platforms, Inc. Tested Version: 5.0.0.25920 Vulnerabilit...

Open Proficy HMI-SCADA 5.0.0.25920 - Password Denial of Service (PoC)

Open Proficy HMI-SCADA 5.0.0.25920 - Password Denial of Service PoC Exploit Title: Open Proficy HMI-SCADA 5.0.0.25920 - 'Password' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2019-11-16 Vendor Homepage: https://apps.apple.com/us/app/proficyscada/id525792142 Software Link: Ap...

Open Proficy HMI-SCADA 5.0.0.25920 Denial Of Service

Exploit Title: Open Proficy HMI-SCADA 5.0.0.25920 - 'Password' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2019-11-16 Vendor Homepage: https://apps.apple.com/us/app/proficyscada/id525792142 Software Link: App Store for iOS devices GE Intelligent Platforms, Inc. Tested Versio...

LAquis SCADA Web Server Command Injection (CVE-2018-18996)

A command injection vulnerability exists in LAquis SCADA. The vulnerability is due to improper handling of parameter submitted in requests. Successful exploitation results in the execution of arbitrary commands with the privileges of the web server process...

Open Proficy HMI-SCADA 5.0.0.25920 - 'Password' Denial of Service (PoC)

Exploit Title: Open Proficy HMI-SCADA 5.0.0.25920 - 'Password' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2019-11-16 Vendor Homepage: https://apps.apple.com/us/app/proficyscada/id525792142 Software Link: App Store for iOS devices GE Intelligent Platforms, Inc. Tested Versio...

LAquis SCADA LGX Report Arbitrary File Write (CVE-2018-18988)

An arbitrary file write vulnerability exists in LAquis SCADA LGX report. Successful exploitation of this vulnerability could result in arbitrary file write and possible arbitrary code execution...

Vulnerability of systems for data collection and process control in Citect SCADA and Mitsubishi MX4 SCADA: This vulnerability arises due to buffer overflow in the login input field, allowing attackers to execute arbitrary code.

The vulnerability of systems for data collection and process control in Citect SCADA and Mitsubishi MX4 SCADA arises due to an overflow in the input field for the login string. Exploiting this vulnerability allows a attacker to execute arbitrary code using a long input string...

Vijeo Citect, CitectSCADA, and PowerLogic SCADA systems are vulnerable to data collection and industrial automation process control. This vulnerability stems from deficiencies in access control for certain functions, allowing attackers to read arbitrary files, send HTTP requests, or cause service interruptions.

The vulnerabilities of systems for data collection and process control in Vijeo Citect, CitectSCADA, and PowerLogic SCADA are related to deficiencies in access control for certain functions. Exploiting these vulnerabilities can allow attackers to read arbitrary files, send HTTP requests, or cause...

IEC870IP driver buffer overflow vulnerability

AVEVA Vijeo Citect and AVEVA CitectSCADA are a suite of data acquisition and monitoring system SCADA software. iec870IP is one of the drivers. A buffer overflow vulnerability exists in the IEC870IP driver v4.14.02 and earlier versions, which can be exploited by an attacker to cause a server-side...

AVEVA Vijeo Citect and Citect SCADA (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit --------- Begin Update A Part 1 of 5 --------- Vendor: AVEVA and Schneider Electric Equipment: AVEVA’s Vijeo Citect and Citect SCADA; Schneider Electric’s Power SCADA Operation --------- End Update A Part...

Operational Technology Networks or OT

Operational Technology Networks or OT Notes: It’s mixing up OT with maritime, so probably isn’t suitable as is. The first section is really good, very relevant. We can use all of that. Once we get in to NMEA data, then it goes off topic. I suggest: Network equipment such as the Scalance Then a...

CVE-2019-16321

ScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a request for a nonexistent resource, as demonstrated by the dwr/test/ PATHINFO...

Advantech WebAccess/SCADA Buffer Overflow Vulnerability (CNVD-2019-32466)

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A buffer overflow vulnerability exists ...

CVE-2019-3975

Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.1 allows a remote, unauthenticated attacker to execute arbitrary code via a crafted IOCTL 70603 RPC message...

CVE-2019-3975

Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.1 allows a remote, unauthenticated attacker to execute arbitrary code via a crafted IOCTL 70603 RPC message...

Stack overflow

Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.1 allows a remote, unauthenticated attacker to execute arbitrary code via a crafted IOCTL 70603 RPC message...

CVE-2019-3975

Stack-based buffer overflow in Advantech WebAccess/SCADA 8.4.1 allows a remote, unauthenticated attacker to execute arbitrary code via a crafted IOCTL 70603 RPC message...

CVE-2019-3975

Advantech WebAccess/SCADA 8.4.1 is affected by CVE-2019-3975 due to a stack-based buffer overflow in the webvprcs/IOCTL 70603 RPC handling, enabling a remote, unauthenticated attacker to execute arbitrary code. This is confirmed across multiple sources (Red Hat advisory, CNVD, NVD entry) with imp...