CVE-2019-18337

A vulnerability has been identified in Control Center Server CCS All versions V1.5.0. The Control Center Server CCS contains an authentication bypass vulnerability in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. A remote attacker with network access ...

GE Mark VIe Controller

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Low skill level to exploit Vendor: GE Equipment: Mark VIe Controller Vulnerabilities: Improper Authorization, Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to create...

Rockwell Automation E3 EC4 (1...5A) via 2100-ENET Motor Overload

Binary data 752352.prm...

SAP DIAG Service Detection

A SAP DIAG Dynamic Information and Action Gateway Service is running at this host. DIAG is a propretiary communication protocol between the SAP GUI and the SAP application server. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...

Denis and Co.

In April 2017, we published a detailed review of a malicious program that used DNS tunneling to communicate to its C&C. That study prompted us to develop a technology to detect similar threats, which allowed us to collect a multitude of malware samples using DNS tunneling. In this article, we wil...

CVE-2017-9857

The vulnerability CVE-2017-9857 in SMA Solar Technology products stems from the SMAdata2+ protocol: it does not properly use authentication with encryption, making it vulnerable to man-in-the-middle, packet injection, and replay attacks. Affected are Sunny Boy TLST-21/TL-21 and Sunny Tripower TL-...

CVE-2017-9857

An issue was discovered in SMA Solar Technology products. The SMAdata2+ communication protocol does not properly use authentication with encryption: it is vulnerable to man in the middle, packet injection, and replay attacks. Any setting change, authentication packet, scouting packet, etc. can be...

Samsung Tizen Security 'Feels like 2005'

SINT MAARTEN—Samsung’s Tizen operating system, a strategic stronghold for the company as it attempts to grow its line of homegrown mobile devices, isn’t such a vanguard when it comes to security. An independent researcher has discovered dozens of vulnerabilities in the OS that puts devices such a...

Modbus Protocol Detection (TCP)

TCP based detection of services supporting the Modbus protocol. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-5686

Johnson & Johnson Animas OneTouch Ping devices mishandle acknowledgements, which makes it easier for remote attackers to bypass authentication via a custom communication protocol...

Authentication flaw

Johnson & Johnson Animas OneTouch Ping devices mishandle acknowledgements, which makes it easier for remote attackers to bypass authentication via a custom communication protocol...

CVE-2016-5686

The CVE-2016-5686 issue affects the Johnson & Johnson Animas OneTouch Ping insulin pump. It stems from a custom communication protocol that mishandles acknowledgements, allowing an unauthenticated remote attacker to spoof acknowledgement packets and bypass authentication. This could enable comman...

CVE-2016-5686

Johnson & Johnson Animas OneTouch Ping devices mishandle acknowledgements, which makes it easier for remote attackers to bypass authentication via a custom communication protocol...

HackPwn 2 0 1 5: The SmartCare crack the details of the analysis-vulnerability warning-the black bar safety net

! A, the target description In the just-concluded HackPwn, hackers have successfully cracked the SmartCare, as nowadays the popular Internet Security Products category, SmartCare can real-time monitoring of the home environment, and pushed to the user's mobile phone. ! SmartCare to achieve the...

Wireshark WCCP Remote Denial of Service Vulnerability

Wireshark is the most popular network protocol parser. A security vulnerability exists in the Wireshark WCCP parser. This can be exploited by a remote attacker to cause a denial of service application crash via a constructed packet...

This $10 Device Can Clone RFID-equipped Access Cards Easily

Are you the one who simply punch your wallet against a reader to get into your office? Then surely your office is using Radio-Frequency Identification RFID cards to manage building access and security. However, these most common access control systems are incredibly easy to hack — and now more th...

ICS-CERT Advisory Warns of Schneider, Emerson Vulnerabilities

Industrial HMI software from Schneider Electric has been updated to patch a buffer overflow vulnerability that could be exploited by a remote attacker. The buffer overflow vulnerability was found in the Wonderware InTouch Access Anywhere Server v10.6 and v11. The server is human machine interface...

Ethernet Industrial Protocol (EtherNet/IP) Implicit Message Detection

Binary data 8291.prm...

Electric Cybersecurity Regulations Have Serial Problem

A class of SCADA vulnerabilities discussed at a recent conference is getting attention not only for the risks they pose to master control systems at electric utilities, but also for illuminating a dangerous gap in important critical infrastructure regulations. Researchers Adam Crain and Chris...

Microsoft Says ZeroAccess Click-Fraud Botnet Abandoned

Microsoft is declaring the ZeroAccess botnet dead. Two weeks after obtaining a court order to disrupt the botnet’s ability to carry out click-fraud, assistant general counsel Richard Boscovich of Microsoft’s Digital Crimes Unit said late last week that the botmasters behind ZeroAccess had abandon...