PT-2015-7663

Name of the Vulnerable Software and Affected Versions Unitronics VisiLogic OPLC IDE versions prior to 9.8.02 Unitronics UniDownloader affected versions not specified Description The issue allows remote attackers to execute unspecified code. It involves the IPWorksSSL.HTTPS.1 ActiveX Control, wher...

PT-2015-7265

Name of the Vulnerable Software and Affected Versions Unitronics VisiLogic OPLC IDE versions prior to 9.8.02 Description The issue allows remote attackers to have an unspecified impact via a crafted web site due to improper restriction of access to ActiveX controls. Multiple ActiveX controls are...

CVE-2015-6478: Improper Access Control

Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site...

CVE-2015-7905: Improper Control of Generation of Code

Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors...

Unitronics VisiLogic OPLC IDE Vulnerabilities (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-274-02 Unitronics VisiLogic OPLC IDE Vulnerabilities that was published November 12, 2015, on the NCCIC/ICS-CERT web site. HP’s Zero Day Initiative ZDI reported to ICS-CERT that Steven Seeley of Source Incite,...

CVE-2011-5086

https50.ocx in IPWorks! SSL in the server in Unitronics UniOPC before 2.0.0 does not properly implement an unspecified function, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted web site...

CVE-2011-5086

https50.ocx in IPWorks! SSL in the server in Unitronics UniOPC before 2.0.0 does not properly implement an unspecified function, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted web site...

CVE-2011-5086

The CVE-2011-5086 issue affects Unitronics UniOPC Server prior to version 2.0.0, arising from the IPWorks! SSL component (https50.ocx) not properly implementing a function. This can be triggered remotely via a crafted web site, leading to a crash and potentially arbitrary code execution. Affected...

CVE-2011-5086: Improper Input Validation

https50.ocx in IPWorks! SSL in the server in Unitronics UniOPC before 2.0.0 does not properly implement an unspecified function, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted web site...

TeeChart Professional ActiveX Control Trusted Integer Dereference

This module exploits an integer overflow in TeeChart Pro ActiveX control. When sending an overly large/negative integer value to the AddSeries property of TeeChart2010.ocx, the code will perform an arithmetic operation that wraps the value and is later directly trusted and called upon. This modul...

TeeChart Professional ActiveX Control 2010.0.0.3 - Trusted Integer Dereference (Metasploit)

$Id: teechartpro.rb 13522 2011-08-11 11:17:30Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Unitronics UNIOPC Server Input Handling Vulnerability

Overview Independent security researchers Billy Rios and Terry McCorkle have identified a vulnerability in Unitronics’ UniOPC Server product. --------- Begin Update A Part 1 of 3 -------- This vulnerability is a result of improper handling of input by a third-party component, https50.ocx, which i...