3516 matches found
Heap overflow
Heap-based buffer overflow in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via a crafted packet...
CVE-2015-0979
Heap-based buffer overflow in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via a crafted packet...
CVE-2015-0979
Summary (CVE-2015-0979) : A heap-based buffer overflow in the SOAP web interface of the SCADA Engine BACnet OPC Server prior to version 2.1.371.24 allows remote arbitrary code execution via a crafted packet. The affected component is the Windows Service SOAP interface; exploitation is remote and ...
CVE-2015-0980
SCADA Engine BACnet OPC Server (BACnet OPC Server) before version 2.1.371.24 is affected by CVE-2015-0980 via a format-string vulnerability in the SOAP web interface (BACnOPCServer.exe). Exploitation could allow remote attackers to execute arbitrary code. The ICS-CERT advisory notes a fixed versi...
CVE-2015-0980
Format string vulnerability in BACnOPCServer.exe in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via format string specifiers in a request...
CVE-2015-0981
The SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to bypass authentication and read or write to arbitrary database fields via unspecified vectors...
CVE-2015-0981
SCADA Engine BACnet OPC Server prior to version 2.1.371.24 is affected by three vulnerabilities tied to the SOAP web interface: (1) CVE-2015-0981 Authentication bypass allowing remote read/write of database fields, (2) CWE-122 Heap-based Buffer Overflow, and (3) CWE-20 Improper Input Validation. ...
This 'Killer USB' can make your Computer explode
Can Hackers turn a remote computer into a bomb and explode it to kill someone, just like they do in hacker movies? Wait, wait! Before answering that, Let me tell you an interesting story about Killer USB drive: A man walking in the subway stole a USB flash drive from the outer pocket of someone...
MICROSYS PROMOTIC Buffer Overflow Vulnerability
MICROSYS PROMOTIC is a SCADA software. MICROSYS PROMOTIC suffers from a buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code or launch a denial-of-service attack within the context of the application because the program fails to properly bounds check...
Attacks Against Critical Infrastructure Seek Operational Intel
In most critical industries—petroleum refineries or energy utilities, for example—there is very little in the way of proprietary information. Refining crude oil into gasoline requires science, not a secret sauce. Same goes for power generation. So why are advanced attackers using the same data...
'Yes, Your Car Wash is On Facebook'
CANCUN–When or if people think about the security of the devices they interact with and use on a daily basis, the machines that run their local car wash probably aren’t high up on that list. But, like everything else with a computer for a brain these days, those machines are connected to the...
Siemens SCALANCE X-200IRT < 5.2.0 Session Hijacking
Binary data scadasiemensscalancex200cve-2015-1049.nbin...
Siemens SIMATIC TIA Portal Detection
Binary data scadaappsiemenstiadetect.nbin...
Siemens Fixes Critical Flaws in Some WinCC Versions
More than two months after the original advisory went out, Siemens has released patches for a pair of critical vulnerabilities in some versions of its Simatic WinCC SCADA product that remained vulnerable. Both of the vulnerabilities are remotely exploitable and have potentially damaging...
Schneider Electric Multiple Products Buffer Overflow
Binary data scadaschneiderelectriccve20149200.nbin...
StruxureWare SCADA Expert ClearSCADA Weak Hashing Algorithm
Binary data scadaclearscadaweakhashingalgorithm.nbin...
Schneider Electric ETG3000 FactoryCast HMI Gateway Unauthorized Access Vulnerability
The Schneider Electric ETG3000 FactoryCast HMI Gateway is a Web-based SCADA system. An unauthorized access vulnerability exists in the Schneider Electric ETG3000 FactoryCast HMI Gateway, which could be exploited by an attacker to gain unauthorized access to sensitive information, such as...
Hard-Coded FTP Credentials Found in Schneider Electric SCADA Gateway
The parade of easily exploitable, critical vulnerabilities in ICS software shows no signs of ending anytime soon, with the latest entrant being two flaws in Schneider Electric’s ETG3000 FactoryCast HMI Gateway that allow unauthenticated remote access to the device’s FTP server and configuration...
Code injection
The 1 CimView and 2 CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen aka .CIM file...
