Optima PLC APIFTP Server Denial of Service Vulnerabilities

Optima PLC APIFTP Server is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-5049

CVE-2012-5049 concerns the Optima PLC APIFTP Server. Public docs describe a denial-of-service vulnerability: a malformed packet can trigger a loop that consumes CPU, potentially crashing the server. The issue is tied to the APIFTP component in Optimalog Optima PLC 1.5.2 and earlier. Related OpenV...

Optimalog Optima PLC Multiple Vulnerabilities

Overview Independent researcher Luigi Auriemma identified a NULL Pointer Dereference and an Infinite Loop and released proof-of-concept exploit code for Optimalog’s Optima PLC application without coordination with ICS-CERT, the vendor, or any other coordinating entity known to ICS-CERT. Optimalog...