Schneider Electric Telvent RTU Improper Ethernet Frame Padding Vulnerability

OVERVIEW David Formby and Raheem Beyah of Georgia Tech have identified a vulnerability caused by an Institute of Electrical and Electronics Engineers IEEE conformance issue involving improper frame padding in Schneider Electric’s Telvent SAGE 2300 and 2400 remote terminal units RTUs. Schneider...

CVE-2015-6485

CVE-2015-6485 corresponds to an ICS vulnerability in Schneider Electric Telvent SAGE RTUs caused by an IEEE Ethernet frame padding issue (CWE-226). The weakness allows an attacker on the network to elicit information leakage from device memory by reading a specially padded Ethernet frame. Affecte...