KLA10502 Multiple vulnerabilities in BACnet OPC Server

Multiple critical vulnerabilities have been found in BACnet OPC Server. Malicious users can exploit these vulnerabilities to execute arbitrary files and read&write local database. Below is a complete list of vulnerabilities 1. An unknwon vulnerabilities can be exploited remotely via unknown vecto...

CVE-2015-0981

The SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to bypass authentication and read or write to arbitrary database fields via unspecified vectors...

CVE-2015-0980

Format string vulnerability in BACnOPCServer.exe in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via format string specifiers in a request...

CVE-2015-0979

Heap-based buffer overflow in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via a crafted packet...

Format string

Format string vulnerability in BACnOPCServer.exe in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via format string specifiers in a request...

Heap overflow

Heap-based buffer overflow in the SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to execute arbitrary code via a crafted packet...

CVE-2015-0980

SCADA Engine BACnet OPC Server (BACnet OPC Server) before version 2.1.371.24 is affected by CVE-2015-0980 via a format-string vulnerability in the SOAP web interface (BACnOPCServer.exe). Exploitation could allow remote attackers to execute arbitrary code. The ICS-CERT advisory notes a fixed versi...

CVE-2015-0981

The SOAP web interface in SCADA Engine BACnet OPC Server before 2.1.371.24 allows remote attackers to bypass authentication and read or write to arbitrary database fields via unspecified vectors...

CVE-2015-0981

SCADA Engine BACnet OPC Server prior to version 2.1.371.24 is affected by three vulnerabilities tied to the SOAP web interface: (1) CVE-2015-0981 Authentication bypass allowing remote read/write of database fields, (2) CWE-122 Heap-based Buffer Overflow, and (3) CWE-20 Improper Input Validation. ...

BACnet OPC Server Authentication Vulnerability

BACnet OPC Server provides data access, alerts, and access to event and historical data between OPC clients and BACnet-compatible devices. BACnet OPC Server has a security vulnerability that can be exploited by an attacker to insert, read, and delete arbitrary items in the database...

BACnet OPC Server Heap Buffer Overflow Vulnerability

BACnet OPC Server provides data access, alerts, and access to event and historical data between OPC clients and BACnet-compatible devices. BACnet OPC Server can trigger heap corruption when processing constructed packets and has a security vulnerability that can be exploited by attackers to cause...

BACnet/IP Device Object Detection

Binary data 7165.pasl...

BACnet-OPC-Client-Buffer-Overflow

After communicating via several emails with the vendor, sharing details about the vulnerability, as well as proof-of-concept code I also offered to send the exploit code for them to test themselves, it was clear that they weren't very interested in fixing the vulnerability. import sys import stru...

BACnet OPC Client 1.0.24 缓冲区溢出漏洞

No description provided by source...

BACnet OPC Client Buffer Overflow

No description provided by source. $Id: bacnetcsv.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

BACnet OPC Client Buffer Overflow Exploit

No description provided by source. !/usr/bin/python bacnet.py BACnet OPC Client Buffer Overflow Exploit Jeremy Brown 0xjbrown41-gmail-com Sept 2010 After communicating via several emails with the vendor, sharing details about the vulnerability, as well as proof-of-concept code I also offered to...

ICONICS WebHMI ActiveX Stack Overflow

No description provided by source. , , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' ='=. presents.. ICONICS WebHMI ActiveX Stack Overflow Vendor Link: http://www.iconics.com/ PDF:...

BACnet/IP Protocol Detection

Binary data 7110.pasl...

BACnet/IP Protocol Detection (SCADA)

Binary data 6726.prm...

bacnet-info NSE Script

Discovers and enumerates BACNet Devices collects device information based off standard requests. In some cases, devices may not strictly follow the specifications, or may comply with older versions of the specifications, and will result in a BACNET error response. Presence of this error positivel...