Advantech/BroadWin SCADA Webaccess 7.0 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/47008/info Advantech/BroadWin SCADA WebAccess is prone to multiple remote vulnerabilities including an information-disclosure issue and a remote code-execution issue. An attacker can exploit these issues to execute arbitrary code and gain access to...

Dozens of SCADA Exploits, Proof-of-concept Code Published

Exploits for scores of vulnerabilities in supervisory control and data acquisition software SCADA were made public on Monday, according to a report by The Register. 34 holes were published on Seclists.org’s Bugtraq mailing list for programs by Siemens, Iconics, 7-Technologies, Datac and Control...

7-Technologies IGSS 9.00.00.11059 - Multiple Vulnerabilities

7-Technologies IGSS 9.00.00.11059 - Multiple Vulnerabilities Sources: http://aluigi.org/adv/igss1-adv.txt http://aluigi.org/adv/igss2-adv.txt http://aluigi.org/adv/igss3-adv.txt http://aluigi.org/adv/igss4-adv.txt http://aluigi.org/adv/igss5-adv.txt http://aluigi.org/adv/igss6-adv.txt...

iconics genesis32 and genesis64 - Multiple Vulnerabilities

iconics genesis32 and genesis64 - Multiple Vulnerabilities Sources: http://aluigi.org/adv/genesis1-adv.txt http://aluigi.org/adv/genesis2-adv.txt http://aluigi.org/adv/genesis3-adv.txt http://aluigi.org/adv/genesis4-adv.txt http://aluigi.org/adv/genesis5-adv.txt...

DATAC RealWin - Multiple Vulnerabilities

DATAC RealWin - Multiple Vulnerabilities Sources: http://aluigi.org/adv/realwin2-adv.txt http://aluigi.org/adv/realwin3-adv.txt http://aluigi.org/adv/realwin4-adv.txt http://aluigi.org/adv/realwin5-adv.txt http://aluigi.org/adv/realwin6-adv.txt http://aluigi.org/adv/realwin7-adv.txt...

DATAC RealWin - Multiple Vulnerabilities

Sources: http://aluigi.org/adv/realwin2-adv.txt http://aluigi.org/adv/realwin3-adv.txt http://aluigi.org/adv/realwin4-adv.txt http://aluigi.org/adv/realwin5-adv.txt http://aluigi.org/adv/realwin6-adv.txt http://aluigi.org/adv/realwin7-adv.txt http://aluigi.org/adv/realwin8-adv.txt Advisory Archiv...

7-Technologies IGSS 9.00.00.11059 - Multiple Vulnerabilities

Sources: http://aluigi.org/adv/igss1-adv.txt http://aluigi.org/adv/igss2-adv.txt http://aluigi.org/adv/igss3-adv.txt http://aluigi.org/adv/igss4-adv.txt http://aluigi.org/adv/igss5-adv.txt http://aluigi.org/adv/igss6-adv.txt http://aluigi.org/adv/igss7-adv.txt http://aluigi.org/adv/igss8-adv.txt...

Interactive Graphical SCADA System Remote Command Injection

This module abuses a directory traversal flaw in Interactive Graphical SCADA System v9.00. In conjunction with the traversal flaw, if opcode 0x17 is sent to the dc.exe process, an attacker may be able to execute arbitrary system commands. Module Options msf use exploit/windows/scada/igss/exec17 m...

DATAC RealWin SCADA Server 2 On_FC_CONNECT_FCS_a_FILE Buffer Overflow

This module exploits a vulnerability found in DATAC Control International RealWin SCADA Server 2.1 and below. By supplying a specially crafted OnFCBINFILEFCSFILE packet via port 910, RealWin will try to create a file which would be saved to C:\Program Files\DATAC\Real Win\RW-version\filename by...

RealWin SCADA Server DATAC Login Buffer Overflow

This module exploits a stack buffer overflow in DATAC Control International RealWin SCADA Server 2.1 Build 6.0.10.10 or earlier. By sending a specially crafted OnFCCONNECTFCSLOGIN packet containing a long username, an attacker may be able to execute arbitrary code. Module Options msf use...

Stuxnet Worm Revealed – Installation, Injection and Mitigation !

In the videos below, Joel Langill deconstructs each part of the worm to show it in action. In the second video you'll see the best practices that InfoSec Institute uses we have a training course dedicated to SCADA control systems which includes a robust Stuxnet lab to mitigate this type of...

Sunway Force Control

Overview ICS-CERT has received a report from Security researcher Dillon Beresford of NSS Labs concerning vulnerabililities affecting Sunway ForceControl and pNetPower SCADA/HMI applications. The reported vulnerabilities are heap-based buffer overflows that could result in a denial of service or t...

KingView 6.5.3 SCADA ActiveX Exploit

Exploit for windows platform in category remote exploits Exploit Title: KingView 6.5.3 SCADA ActiveX Date: March 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://download.kingview.com/software/kingview%20English%20Version/kingview6.53EN.rar Version: 6.53 English Tested on:...

KingView 6.5.3 SCADA - ActiveX

KingView 6.5.3 SCADA - ActiveX Exploit Title: KingView 6.5.3 SCADA ActiveX Date: March 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://download.kingview.com/software/kingview%20English%20Version/kingview6.53EN.rar Version: 6.53 English Tested on: Windows xp sp3 running on VMwa...

KingView 6.5.3 SCADA Active-X

Exploit Title: KingView 6.5.3 SCADA ActiveX Date: March 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://download.kingview.com/software/kingview%20English%20Version/kingview6.53EN.rar Version: 6.53 English Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox...

KingView 6.5.3 SCADA - ActiveX

Exploit Title: KingView 6.5.3 SCADA ActiveX Date: March 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://download.kingview.com/software/kingview%20English%20Version/kingview6.53EN.rar Version: 6.53 English Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox...

Stack overflow

Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute arbitrary code via a crafted .csv file, related to a status log message...

CVE-2010-4740

Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute arbitrary code via a crafted .csv file, related to a status log message...

CVE-2010-4740

CVE-2010-4740 describes a stack-based buffer overflow in WTclient.dll of SCADA Engine’s BACnet OPC Client prior to 1.0.25, enabling a user‑assisted remote attacker to execute arbitrary code by processing a specially crafted .csv file. Public references confirm the vulnerability affects SCADA Engi...

CVE-2010-4733

WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms have a default username and password, which makes it easier for remote attackers to obtain superadmin access via the web interface, a...