Elipse E3 Process Control Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-069-04 Elipse E3 Process Control Vulnerability that was published March 10, 2015, on the NCCIC/ICS-CERT web site. Ivan Sanchez from Nullcode Team has identified a process control vulnerability in the Elipse E3...

Elipse E3 Process Control Vulnerability

OVERVIEW Ivan Sanchez from Nullcode Team has identified a process control vulnerability in the Elipse E3 application. The process control vulnerability is a result of a third-party DLL, developed by Telerik, which is used in the Elipse E3 application. Elipse has released a new version that...

CVE-2015-0978

Multiple untrusted search path vulnerabilities in 1 EQATEC.Analytics.Monitor.Win32vc100.dll and 2 EQATEC.Analytics.Monitor.Win32vc100-x64.dll in Elipse E3 4.5.232 through 4.6.161 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory. NOTE: this may overlap...

CVE-2015-0978

CVE-2015-0978 affects Elipse E3 up to 4.6.161 and the Telerik EQATEC Analytics Monitor DLLs (Win32 vc100.dll and Win32 vc100-x64.dll). The vulnerability arises from untrusted DLL loading (OpenSSL-related) that can allow a local attacker to execute arbitrary code by convincing a user to load a mal...