3518 matches found
GE Proficy HMI SCADA CIMPLICITY Local Privilege Vulnerability
GE Proficy HMI SCADA CIMPLICITY is a client/server based HMI/SCADA solution. A security vulnerability exists in GE Proficy HMI SCADA CIMPLICITY that allows a local attacker to exploit the vulnerability to elevate privileges...
State-Sponsored SCADA Malware targeting European Energy Companies
Security researchers have discovered a new campaign targeting energy companies in Western Europe with a sophisticated malware that almost goes to great lengths in order to remain undetected while targeting energy companies. Researchers from SentinelOne Labs discovered the malware, which has alrea...
91 Percent of Public-Facing ICS Components Are Remotely Exploitable
We live in an increasingly connected world, but even in an age when DDoS attacks can take entire airlines offline, many critically sensitive industrial control systems ICS are still connected to the internet. A pair of reports released today by Kaspersky Lab reveal how dire the situation really i...
GE Proficy HMI/SCADA CIMPLICITY 8.2 local mention the right vulnerability
No description provided by source...
INDAS Web SCADA Path Traversal Vulnerability
OVERVIEW Independent researcher Ehab Hussein of IOActive has identified a path traversal vulnerability in the INDAS Web SCADA application. INDAS has produced new software to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The following INDAS Web SCAD...
GE Proficy HMI/SCADA CIMPLICITY 8.2 - Privilege Escalation
Exploit for windows platform in category local exploits / Exploit Title: GE Proficy HMI/SCADA CIMPLICITY 8.2 Local Privilege Escalation Exploit0 day Vulnerability Discovery and Exploit Author: Zhou Yu Email: Version: 8.2 Tested on: Windows 7 SP1 X32 CVE : None Vulnerability Description:...
ICS SCADA NSA Situational Awareness: Grassmarlin
ICS SCADA NSA Situational Awareness: Grassmarlin Provide IP network situational awareness of industrial control systems ICS and Supervisory Control and Data Acquisition SCADA networks to support network security. Passively map, and visually display, an ICS/SCADA network topology while safely...
Cogent DataHub < 6.4.3 OPC Client Reconnection Saturation Remote DoS
Binary data scadacogentdatahub643.nbin...
Cogent DataHub < 6.4.5Beta OPC Connection Failure DoS
Binary data scadacogentdatahub645beta.nbin...
And drainage SCADA industrial control systems /DataSrvs/UCCGSrv. asmx/GetWaterMeterType Parameter model SQL injection vulnerability
No description provided by source...
New Irongate ICS Malware Steals From Stuxnet Playbook
New malware that targets industrial control systems called Irongate was found by researchers who say the discovery should serve as another wakeup call to the security industry to shore up its detection capabilities around ICS and SCADA threats. Irongate, which shares some of the same attributes a...
IRONGATE ICS Malware: Nothing to See Here...Masking Malicious Activity on SCADA Systems
In the latter half of 2015, the FireEye Labs Advanced Reverse Engineering FLARE team identified several versions of an ICS-focused malware crafted to manipulate a specific industrial process running within a simulated Siemens control system environment. We named this family of malware IRONGATE...
IRONGATE ICS Malware: Nothing to See Here...Masking Malicious Activity on SCADA Systems
In the latter half of 2015, the FireEye Labs Advanced Reverse Engineering FLARE team identified several versions of an ICS-focused malware crafted to manipulate a specific industrial process running within a simulated Siemens control system environment. We named this family of malware IRONGATE...
ESC 8832 Unauthorized Access Vulnerability
ESC 8832 is a Web-based SCADA system from ESC Corporation. A security vulnerability exists in ESC 8832 version 3.02 and earlier. A remote attacker can exploit this vulnerability to gain unauthorized access by performing a brute force attack on the parameters...
Moxa MiiNePort Devices Leak Data, Open to Unauthorized Access
Embedded device servers made by Moxa remain vulnerable to a trio of vulnerabilities disclosed today in an advisory published by the Industrial Control Systems Cyber Emergency Response Team ICS-CERT and a blog post by researcher Karn Ganeshen. Moxa, which is based in Taiwan, will publish a beta...
Advantech WebAccess SCADA Dashboard Arbitrary File Upload (CVE-2016-0854)
An arbitrary file upload vulnerability has been reported in the Dashboard component of Advantech WebAccess. The vulnerability is due to insufficient input validation within the uploadImageCommon, uploadFile or uploadBannerImage methods in the UploadAjaxAction script. A remote, unauthenticated...
和达SCADA系统 /NB/frmMain.aspx文件敏感信息泄露漏洞
No description provided by source...
贝欧燃气SCADA监控系统 /WitWaterNet/IndexService.asmx/Login SQL注入漏洞
No description provided by source...
Meteocontrol WEB'log Arbitrary Command Execution Vulnerability
Meteocontrol WEB'log is a web-based SCADA system that provides energy and power configuration management functions using different connected devices. A security vulnerability exists in the access command shell-like functionality of several Meteocontrol WEB'log products, which could be exploited b...
Advantech WebAccess SCADA Dashboard Directory Traversal (CVE-2016-0855)
A directory traversal vulnerability has been reported in the Dashboard component of Advantech WebAccess. The vulnerability is due to insufficient input validation within the openWidget, removeFolder or removeFile methods in the FileAjaxAction script. A remote, unauthenticated attacker could explo...