3519 matches found
CVE-2017-6029
A Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. This may allow remote code execution...
CVE-2017-6031
CVE-2017-6031 affects Certec EDV GmbH atvise scada pre-3.0. The issue is improper neutralization of HTTP headers for scripting syntax (header injection) that may enable remote code execution. Affected: atvise scada prior to version 3.0; exploitability is remotely possible. Mitigation: upgrade to ...
CVE-2017-6031
A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An "improper neutralization of HTTP headers for scripting syntax" issue has been identified, which may allow remote code execution...
CVE-2017-6029
CVE-2017-6029 affects Certec EDV GmbH atvise SCADA prior to version 3.0, describing two related issues: a Cross-Site Scripting vulnerability (CWE-79) and a header injection bug (CWE-644) that together may enable remote code execution. The NVD entry confirms the XSS as the primary CVE-2017-6029 it...
LAquis SCADA dll Hijacking Vulnerability
LAquis SCADA is the tool and language for data collection, process supervision, industrial automation, storage and report generation for quality management and application development. LAquis SCADA suffers from a dll hijacking vulnerability. The vulnerability is caused due to the LAquis SCADA...
LAquis SCADA Software Web Server Directory Traversal Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of LAquis SCADA Software. Authentication is not required to exploit this vulnerability. The specific flaw exists within global processing of requests inside the web server. The issue results...
Schneider Electric Interactive Graphical SCADA DLL Load Remote Code Execution Vulnerability
Schneider Electric Interactive Graphical SCADA System Software is a suite of automation software for process control and supervision of SCADA systems from the French company Schneider Electric SchneiderElectric. A DLL loading remote code execution vulnerability exists in Schneider Electric...
CVE-2017-6033
Schneider Electric IGSS (Interactive Graphical SCADA System) Software Versions 12 and earlier are affected by a DLL Hijacking vulnerability (CVE-2017-6033) due to Uncontrolled Search Path Element (CWE-427). The issue arises when a malicious DLL with the same name as a legitimate file is placed in...
CVE-2017-6033
A DLL Hijacking issue was discovered in Schneider Electric Interactive Graphical SCADA System IGSS Software, Version 12 and previous versions. The software will execute a malicious file if it is named the same as a legitimate file and placed in a location that is earlier in the search path...
Certec EDV GmbH atvise scada
CVSS v3 6.1 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Certec EDV GmbH Equipment: atvise scada Vulnerabilities: Cross-Site Scripting, Header Injection AFFECTED PRODUCTS The following versions of atvise scada, a HMI configuration platform, are affected: Atvise scada 3.0 an...
Certec EDV GmbH atvise scada (Update A)
CVSS v3 6.1 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Certec EDV GmbH Equipment: atvise scada Vulnerabilities: Cross-Site Scripting, Header Injection UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-17-096-01 Certec EDV GmbH...
Sistemi Winlog SCADA Software DLL Hijacking
Sielco Sistemi Winlog SCADA Software Insecure Library Loading Allows Code Execution Vendor: Sielco Sistemi Equipment: Winlog SCADA Software Vulnerability: Uncontrolled Search Path Element ICS-CERT Advisory https://ics-cert.us-cert.gov/advisories/ICSA-17-038-01 AFFECTED PRODUCTS The following Siel...
SCADA engine BACnetOPCServer suffers from dll hijacking vulnerability
SCADA system is a data acquisition and monitoring control system. bacnetOPCServer is the server software for the SCADA engine. The BACnetOPCServer software's BACnSvrTest.exe component is vulnerable to DLL hijacking due to insecure loading of library files, which can be used to maliciously load a...
Siemens S7 Protocol Support Detection
Binary data scadasiemenssimatics7plcdetect.nbin...
CADA 3S CoDeSys Gateway Server - Directory Traversal Exploit
Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework http://metasploit.com require 'msf/core' class MetasploitModule 'SCADA 3S CoDeSys Gateway Server Directory...
LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA
CVSS v3 5.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME Equipment: LAquis SCADA Vulnerability: Path Traversal AFFECTED PRODUCTS The following versions of LAquis SCADA, an industrial automation software, are...
LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA
CVSS v3 7.3 ATTENTION: Low skill level to exploit. Vendor: LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME Equipment: LAquis SCADA Vulnerability: Improper Access Control AFFECTED PRODUCTS The following versions of LAquis SCADA, an industrial automation software, are affected: LAquis...
Threat Outbreak Alert RuleID28316: Email Messages Distributing Malicious Software on March 15, 2017
Medium Alert ID: 53040 First Published: 2017 March 15 17:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28316 may contain the following files: Name | Si...