3516 matches found
Sielco Sistemi Winlog <= 2.07.16 Buffer Overflow
No description provided by source. !/usr/bin/ruby Exploit Title: Sielco Sistemi Winlog Buffer Overflow = v2.07.16 Date: 05.06.2012 Exploit Author: m1k3 Vendor Homepage: http://www.sielcosistemi.com/en/download/public/winloglite.html Software Link:...
Winlog Lite SCADA HMI system SEH 0verwrite Vulnerability
No description provided by source. Vuln Title: Winlog Lite SCADA HMI system SEH 0verwrite Vulnerability Author: FaryadR a.k.a Ciph3r tested on : winXp sp3 and Winlog Lite 2.06.17 Version Twitter : https://twitter.com/faryadR Mail : [email protected] Website : http://0c0c0c0c.com Vendor :...
DATAC RealWin Multiple Vulnerabilities
No description provided by source. Sources: http://aluigi.org/adv/realwin2-adv.txt http://aluigi.org/adv/realwin3-adv.txt http://aluigi.org/adv/realwin4-adv.txt http://aluigi.org/adv/realwin5-adv.txt http://aluigi.org/adv/realwin6-adv.txt http://aluigi.org/adv/realwin7-adv.txt...
Cogent DataHub <= 7.1.1.63 Stack Overflow
No description provided by source. Luigi Auriemma Application: Cogent DataHub http://www.cogentdatahub.com/Products/CogentDataHub.html Versions: = 7.1.1.63 Platforms: Windows Bug: stack unicode overflow Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web...
Stuxnet-like 'Havex' Malware Strikes European SCADA Systems
Security researchers have uncovered a new Stuxnet like malware, named as “Havex”, which was used in a number of previous cyber attacks against organizations in the energy sector. Just like Famous Stuxnet Worm, which was specially designed to sabotage the Iranian nuclear project, the new trojan...
Advantech WebAccess SCADA webvact.ocx AccessCode2 Buffer Overflow (CVE-2014-0768)
A stack buffer overflow exists in Advantech's WebAccess SCADA software. This is due to insufficient input validation on the AccessCode2 parameter of the webvact.ocx ActiveX control, a part of the WebAccess Client. A remote, unauthenticated attacker could exploit this vulnerability by enticing a...
Schneider Electric SCADA Expert ClearSCADA Vulnerabilities (Update A)
OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-14-259-01 Schneider Electric SCADA Expert ClearSCADA Vulnerabilities that was published September 16, 2014, on the NCCIC/ICS-CERT web site. Independent researcher Aditya Sood has identified a weak hashing algorithm...
Advantech WebAccess SCADA webvact.ocx AccessCode Buffer Overflow (CVE-2014-0767)
A stack buffer overflow exists in Advantech's WebAccess SCADA software. This is due to insufficient input validation on the AccessCode parameter of the webvact.ocx ActiveX control, a part of the WebAccess Client. A remote, unauthenticated attacker could exploit this vulnerability by enticing a...
Advantech WebAccess SCADA webvact.ocx NodeName2 Buffer Overflow (CVE-2014-0766)
A stack buffer overflow exists in Advantech's WebAccess SCADA software. This is due to insufficient input validation on the NodeName2 parameter of the webvact.ocx ActiveX control, a part of the WebAccess Client. A remote unauthenticated attacker could exploit this vulnerability by enticing a...
COPA-DATA Patches DNP3 SCADA Vulnerability
A vulnerability exists in a particular brand of SCADA software that if left unpatched, could trigger a denial of service condition and go on to compromise the software’s communication connections, resulting in system instability. The problem is an improper input validation vulnerability and exist...
CVE-2014-2342
Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service excessive data processing via a crafted DNP3 packet...
CVE-2014-2343
Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service excessive data processing via a crafted DNP request over a serial line...
Code injection
Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service excessive data processing via a crafted DNP3 packet...
Design/Logic Flaw
Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service excessive data processing via a crafted DNP request over a serial line...
CVE-2014-2342 Triangle MicroWorks SCADA Data Gateway Resource Exhaustion
Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows remote attackers to cause a denial of service excessive data processing via a crafted DNP3 packet...
CVE-2014-2343
The CVE concerns Triangle MicroWorks SCADA Data Gateway prior to 3.00.0635, where a crafted DNP3 request on a serial line can cause an input-validation-based DoS due to excessive data processing. A related Nessus entry and ICS-CERT advisory confirm a broader DoS risk in affected releases, with IP...
CVE-2014-2343 Triangle MicroWorks SCADA Data Gateway Resource Exhaustion
Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service excessive data processing via a crafted DNP request over a serial line...
CVE-2014-2342
Triangle MicroWorks SCADA Data Gateway vulnerable to DoS via crafted DNP3 packets. Affected: versions before 3.00.0635. Root cause: incorrect input validation leading to uncontrolled resource consumption (IP-connected DoS; serial connections also impacted with physical access). Impact: denial of ...
BACnet/IP Protocol Detection (SCADA)
Binary data 6726.prm...
Yokogawa CENTUM CS 3000 SCADA Service Buffer Overflow (CVE-2014-0783)
A remote code execution vulnerability has been reported in Yokogawa CENTUM CS 3000. A remote attacker can exploit this vulnerability by sending specially crafted packets...