7T Interactive Graphical SCADA System (IGSS) Directory Traversal (CVE-2011-1565)

A directory traversal vulnerability has been reported in 7T Interactive Graphical SCADA System IGSS. 7-Technologies' IGSS is a Supervisory Control and Data Acquisition SCADA system used for monitoring and controlling industrial processes. A remote attacker may exploit this vulnerability to read a...

7T Interactive Graphical SCADA System Arbitrary File Execution (CVE-2011-1566)

A file execution vulnerability has been reported in 7T Interactive Graphical SCADA System IGSS. 7-Technologies' IGSS is a Supervisory Control and Data Acquisition SCADA system used for monitoring and controlling industrial processes. A remote attacker may exploit this vulnerability to execute...

7-Technologies Interactive Graphical SCADA System Detection (Windows SMB Login)

SMB login-based detection of the Interactive Graphical SCADA System. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Interactive Graphical SCADA System ODBC Server Buffer Overflow Vulnerability

This host is installed with Interactive Graphical SCADA System and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbigssodbcserverbofvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ Interactive Graphical SCADA System ODBC Server Buffer Overflow Vulnerability Authors: Soora...

Interactive Graphical SCADA System ODBC Server Buffer Overflow Vulnerability

Interactive Graphical SCADA System is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Get Ready for Hacker Halted 2011, Miami 21-27 October

Get Ready for Hacker Halted 2011, Miami 21-27 October Hacker Halted returns to Miami for the 3rd year in a row. Following last year's success, we are expecting this year to be bigger and better. Hacker Halted will feature 4 focus tracks: 1.What's Hot – Featuring cutting-edge presentations on key...

Get Ready for Hacker Halted 2011, Miami 21-27 October

Get Ready for Hacker Halted 2011 , Miami 21-27 October Hacker Halted returns to Miami for the 3rd year in a row. Following last year's success, we are expecting this year to be bigger and better. Hacker Halted will feature 4 focus tracks: 1.What's Hot – Featuring cutting-edge presentations on key...

Siemens Tecnomatix FactoryLink SCADA VRN Server Arbitrary File Download

An arbitrary file download vulnerability has been reported in Siemens Tecnomatix FactoryLink SCADA VRN Server. The vulnerability is due to a boundary error in the application's VRN Server, which occurs while handling incoming message requests. A remote attacker could trigger this vulnerability by...

Siemens Tecnomatix FactoryLink SCADA VRN Server Multiple Buffer Overflows

Multiple buffer overflow vulnerabilities have been reported in Siemens Tecnomatix FactoryLink VRN Server SCADA system. The vulnerabilities are due to a boundary error in the application's VRN Server, which occurs while handling incoming message requests. A remote attacker could leverage these...

TeeChart Professional ActiveX Control 2010.0.0.3 Trusted Integer Dereference

$Id: teechartpro.rb 13554 2011-08-13 02:05:08Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

TeeChart Professional ActiveX Control <= 2010.0.0.3 Trusted Integer

Exploit for windows platform in category remote exploits $Id: teechartpro.rb 13522 2011-08-11 11:17:30Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

TeeChart Professional ActiveX Control Trusted Integer Dereference

This module exploits an integer overflow in TeeChart Pro ActiveX control. When sending an overly large/negative integer value to the AddSeries property of TeeChart2010.ocx, the code will perform an arithmetic operation that wraps the value and is later directly trusted and called upon. This modul...

TeeChart Professional ActiveX Control 2010.0.0.3 - Trusted Integer Dereference (Metasploit)

$Id: teechartpro.rb 13522 2011-08-11 11:17:30Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Live in Vegas: Latest from Black Hat and DEFCON

UPDATED: The Black Hat Briefings and DEFCON hacker shows hadn’t even gotten under way before making news. Even before braving the 115 degree heat of the Las Vegas strip, researchers have been pulling the covers off their work in recent weeks, and Threatpost has been there, reporting on new method...

CVE-2011-2959

The CVE-2011-2959 entry concerns a stack-based buffer overflow in the ODBC service (Odbcixv9se.exe) of 7-Technologies IGSS (Interactive Graphical SCADA System) versions 9 and earlier. A remote attacker can send a crafted packet to TCP port 22202 to trigger a denial of service and, as implied by m...

Don't Say I Never Told You: Researcher Warned Congress Of Stuxnet Variants 10 Months Ago

Stuxnet may have been super sophisticated cyber weapon deployed by state actors, but future generations of the malware will be available to run of the mill script kiddies, a noted expert on security and industrial control systems has warned in a letter to the U.S. Congress ten months ago. Ralph...

CVE-2011-2959: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Open Database Connectivity ODBC service Odbcixv9se.exe in 7-Technologies Interactive Graphical SCADA System IGSS 9 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted packet to TCP port 22202...

Stuxnet Part Deux? US Officials Warn of Stuxnet Variants

Officials at the Department of Homeland Security warned lawmakers this week that we may not have seen the last of Stuxnet, the infamous worm that wound its way through SCADA systems just over a year ago. In a statement published on Tuesday, Sean P. McGurk and Roberta Stempfley of the DHS’ Office ...

Sielco Sistemi Winlog Buffer Overflow

Overview ICS-CERT originally released Advisory ICSA-11-298-01P on the US-CERT secure portal on October 25, 2011. This web page release was delayed to allow users time to download and install the update. Independent researcher Paul Davis has identified a buffer overflow vulnerability in Sielco...

Wide Range of GSM Modules, SCADA Systems Vulnerable to Remote Control

If you think your car is safe and secure sitting in your driveway at night with its fancy alarm system enabled, Don Bailey has some bad news for you: he can unlock it and turn it on. Whenever he wants. From the other side of the country. Bailey, a senior security consultant at iSEC Partners known...