3516 matches found
CVE-2013-2785
Multiple buffer overflows in CimWebServer.exe in the WebView component in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.0 SIM 27, 8.1 before SIM 25, and 8.2 before SIM 19, and Proficy Process Systems with CIMPLICITY, allow remote attackers to execute arbitrary code via crafted...
Buffer overflow
Multiple buffer overflows in CimWebServer.exe in the WebView component in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.0 SIM 27, 8.1 before SIM 25, and 8.2 before SIM 19, and Proficy Process Systems with CIMPLICITY, allow remote attackers to execute arbitrary code via crafted...
CVE-2013-2785
Multiple buffer overflows in CimWebServer.exe in the WebView component in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.0 SIM 27, 8.1 before SIM 25, and 8.2 before SIM 19, and Proficy Process Systems with CIMPLICITY, allow remote attackers to execute arbitrary code via crafted...
CVE-2013-2785
CVE-2013-2785 affects GE Intelligent Platforms Proficy HMI/SCADA CIMPLICITY (WebView/CimWebServer). The vulnerability stems from improper input handling in CimWebServer’s WebView, allowing a remote attacker to execute arbitrary code by sending crafted data to TCP port 10212. Affected installation...
GE Proficy DNP3 Improper Input Validation
OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on October 24, 2013, and is now being released to the NCCIC/ICS-CERT Web site. General Electric GE Intelligent Platforms reported to NCCIC/ICS-CERT an improper input validation vulnerability in the DNP3 driver used...
Bug Bounty to Reward Researchers with Redeemable Points
IntegraXor, a manufacturer of supervisory control and data acquisition SCADA equipment, announced last week that it would implement a bug bounty program offering points redeemable for company services to researchers that disclose security vulnerabilities in their IGX SCADA system. In most bug...
ICS, SCADA Attacks Targeted and Disruptive
Honeypots and honeynets have long been used as enticements to lure hackers into a false network in order to study attacks. While long a favorite of many high-end enterprises and security researchers studying attacks against traditional IT infrastructures, a number of industrial control system...
Schneider Patches 18-Month Old SCADA Bugs
More than 18 months after a security researcher revealed a long list of vulnerabilities in its SCADA products, Schneider Electric has released patches for a subset of those bugs for a couple of the affected products. In December 2011, security researcher Rubén Santamarta disclosed a series of...
PROMOTIC SCADA Server Detection
Binary data 6859.prm...
Mitsubishi MX Component ActiveX Remote Code Execution
Binary data scadamitsubishimxcomponentactivex.nbin...
Triangle MicroWorks Improper Input Validation
OVERVIEW Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation vulnerability in multiple Triangle MicroWorks’ products and third‑party components. Triangle MicroWorks has produced an update that mitigates this vulnerability. Adam Crain has...
Hard-Coded Credentials Found in TURCK ICS Devices
Hard-coded credentials are a longstanding security no-no, but they’re also an ever-present reality because of developers and IT managers who require remote access to networks and systems for troubleshooting purposes. The level of risk in such cases depends on the system in question. But one thing...
Simple Com Tools COM1000 Device Detection
Binary data 6838.prm...
Grid Utilities Critical Infrastructure Protection Lacking
It would seem that what spurs private and public electric grid utility operators to action with regard to cybersecurity isn’t the Chinese or Iranians attacking them, but the word “mandatory”. A paper published yesterday by two U.S. legislators revealed that when there are mandatory cybersecurity...
Sixnet Universal Protocol Undocumented Function Codes (Update B)
OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-13-231-01A Sixnet Universal Protocol Undocumented Function Codes that was published August 26, 2013, on the ICS-CERT Web page. --------- Begin Update B Part 1 of 1 -------- Researchers Kyle Stone and Mehdi Sabraoui...
Honeynet Project Researchers Build ICS Honeypot
Industrial control system and SCADA honeypots have been tried before with relative success. While those systems were enticing to hackers who hammered away on them, they were also complicated, required real ICS and SCADA gear, and weren’t publicly available. Two researchers from Norway and Denmark...
Clorius Controls ISC SCADA Information Disclosure
Binary data scadacloriuscontrolsinfodisclosure.nbin...
Proficy Portal SCADA server detection
Binary data 6813.prm...