Procyon Core Server HMI Memory Corruption SCADA Remote Code Execution (CVE-2011-3322)

A remote overflow vulnerability has been reported in Procyon Core Server HMI service...

Scada Engine BACnet OPC Client SCADA Remote Code Execution (CVE-2010-4740)

A buffer overflow vulnerability has been reported in SCADA Engine's BACnet OPC Client. The vulnerability is due to a boundary check error. A remote attacker may exploit this issue by sending specially crafted malicious file to be opened using the affected product. Successful exploitation could...

CVE-2013-2793

Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000 through 3.15.0000 allow remote attackers to cause a denial of service infinite loop via a crafted DNP3 TCP packet...

CVE-2013-2791

MatrikonOPC SCADA DNP3 OPC Server 1.2.0 allows remote attackers to cause a denial of service master-station daemon crash via a malformed DNP3 TCP packet from the IP address of an outstation...

CVE-2013-2794

Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000 through 3.15.0000 allow physically proximate attackers to cause a denial of service infinite loop via crafted input over a serial line...

Design/Logic Flaw

MatrikonOPC SCADA DNP3 OPC Server 1.2.0 allows remote attackers to cause a denial of service master-station daemon crash via a malformed DNP3 TCP packet from the IP address of an outstation...

Design/Logic Flaw

Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000 through 3.15.0000 allow physically proximate attackers to cause a denial of service infinite loop via crafted input over a serial line...

Code injection

Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000 through 3.15.0000 allow remote attackers to cause a denial of service infinite loop via a crafted DNP3 TCP packet...

CVE-2013-2793

Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000 through 3.15.0000 allow remote attackers to cause a denial of service infinite loop via a crafted DNP3 TCP packet...

CVE-2013-2791

MatrikonOPC SCADA DNP3 OPC Server 1.2.0 allows remote attackers to cause a denial of service master-station daemon crash via a malformed DNP3 TCP packet from the IP address of an outstation...

CVE-2013-2791

MatrikonOPC SCADA DNP3 OPC Server 1.2.0 is affected by an improper input validation vulnerability (CWE-20) that can be triggered by a malformed DNP3 TCP packet from an outstation, potentially causing the master server to crash and disrupt OPC communication. The issue is exploitable remotely, with...

CVE-2013-2794

CVE-2013-2794 affects Triangle MicroWorks SCADA Data Gateway (v2.50.0309–v3.00.0616), DNP3 .NET Protocol components (v3.06.0.171–v3.15.0.369), and DNP3 ANSI C libraries (v3.06.0000–v3.15.0000). Root cause is improper input validation that can trigger an infinite loop, causing a DoS. IP-connected ...

CVE-2013-2793

CVE-2013-2793 affects Triangle MicroWorks SCADA Data Gateway (v2.50.0309–v3.00.0616), DNP3 .NET Protocol components (v3.06.0.171–v3.15.0.369), and DNP3 ANSI C libraries (v3.06.0000–v3.15.0000). The vulnerability is improper input validation that allows an attacker to cause a denial of service (in...

CVE-2013-2794

Triangle MicroWorks SCADA Data Gateway 2.50.0309 through 3.00.0616, DNP3 .NET Protocol components 3.06.0.171 through 3.15.0.369, and DNP3 C libraries 3.06.0000 through 3.15.0000 allow physically proximate attackers to cause a denial of service infinite loop via crafted input over a serial line...

Siemens WinCC Exploitable Crashes

Overview ICS-CERT Advisory ICSA-11-175-02P was originally released to the US-CERT Portal on June 24, 2011. This web page release was delayed to allow users sufficient time to download and install the update. ICS-CERT has received a report from independent security researchers Billy Rios and Terry...

Xxe

Schneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via an XML document containing an...

CVE-2013-2796

Schneider Electric Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via an XML document containing an...

CVE-2013-2796

This entry (CVE-2013-2796) describes an XML External Entity (XXE) vulnerability in Schneider Electric products: Vijeo Citect 7.20 and earlier, CitectSCADA 7.20 and earlier, and PowerLogic SCADA 7.20 and earlier. The underlying issue is improper restriction of XML entities, allowing a remote attac...

Chinese Hackers Caught by US water control system Honeypots

A notorious Chinese hacker collective known as APT1 or Comment Crew, possibly linked to the Chinese Army, have been caught red handed breaking into a fake United States water control system i.e. known as a Honeypot. Kyle Wilhoit, a researcher with security company Trend Micro has just revealed th...

Chinese Hackers Caught by US water control system Honeypots

A notorious Chinese hacker collective known as APT1 or Comment Crew, possibly linked to the Chinese Army, have been caught red handed breaking into a fake United States water control system i.e. known as a Honeypot. Kyle Wilhoit, a researcher with security company Trend Micro has just revealed th...