The vulnerability of SCADA systems such as EcoStruxure Geo SCADA Expert 2020 and EcoStruxure Geo SCADA Expert 2019 lies in access control errors, which allow attackers to trigger service interruptions.

The vulnerability of SCADA systems such as EcoStruxure Geo SCADA Expert 2020 and EcoStruxure Geo SCADA Expert 2019 is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

VISAM VBASE 安全漏洞

VISAM VBASE is a data acquisition and monitoring system from VISAM Germany. A security vulnerability exists in VISAM VBASE version v11.7.0.2 that originates from the use of an XOR with a static initial key to obfuscate login messages. An attacker can exploit the vulnerability to obtain login...

Mitsubishi Electric MC Works64 代码问题漏洞

Mitsubishi Electric MC Works64 is a data acquisition and monitoring system SCADA from Mitsubishi Electric Japan. A code issue vulnerability exists in Mitsubishi Electric MC Works64 that stems from incorrect input validation of data packets...

CVE-2022-34739

The fingerprint module has a vulnerability of overflow in arithmetic addition. Successful exploitation of this vulnerability may result in the acquisition of data from unknown addresses in address mappings...

Buffer overflow

The fingerprint module has a vulnerability of overflow in arithmetic addition. Successful exploitation of this vulnerability may result in the acquisition of data from unknown addresses in address mappings...

CVE-2022-34739

The fingerprint module has a vulnerability of overflow in arithmetic addition. Successful exploitation of this vulnerability may result in the acquisition of data from unknown addresses in address mappings...

CVE-2022-34739

CVE-2022-34739 affects Huawei/HarmonyOS Fingerprint Module. The vulnerability is an overflow in arithmetic addition in the fingerprint component, which could allow an attacker to obtain data from unknown addresses in address mappings. The NVD description notes exploitation may lead to data leakag...

The vulnerability of the WMDLCDRV.ini driver of the software used for configuring SCADA systems such as MOSCAD/STS Toolbox and StarControls staRTU allows a intruder to gain unauthorized access to protected information.

The vulnerability of the wmdlcdrv.ini driver of the SCADA system software for MOSCAD/STS Toolbox and StarControls staRTU lies in the use of rigidly encrypted user credentials. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the IPGW protocol implementation in MOSCAD SCADA systems, including ACE IP Gateway (CPU 4600), allows a perpetrator to execute arbitrary code.

The vulnerability of the IPGW protocol implementation in MOSCAD SCADA systems, such as ACE IP Gateway CPU 4600, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Siemens SIMATIC WinCC Kiosk Mode Incorrect Initialization Vulnerability

SIMATIC PCS 7 is a process control system.SIMATIC WinCC is an automated data acquisition and monitoring SCADA system.SIMATIC WinCC Runtime Professional is a visual runtime platform for operators to control and monitor machines and equipment. A security vulnerability exists in Siemens SIMATIC WinC...

The vulnerability of the Elcomplus SmartPPT SCADA server, related to information disclosure, allows a intruder to expose the protected information.

The vulnerability of the Elcomplus SmartPPT SCADA server is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System (IGSS), arises from buffer overflows in the stack, allowing an intruder to execute arbitrary code.

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System IGSS, arises due to overflow of the buffer on the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created message...

Feds: APTs Have Tools That Can Take Over Critical Infrastructure

Threat actors have built and are ready to deploy tools that can take over a number of widely used industrial control system ICS devices, which spells trouble for critical infrastructure providers—particularly those in the energy sector, federal agencies have warned. In a joint advisory, the...

Schneider Electric Interactive Graphical SCADA System Access Control Error Vulnerability (CNVD-2022-13067)

Schneider Electric Interactive Graphical SCADA System IGSS is a SCADA Data Acquisition and Supervisory System system for monitoring and controlling industrial processes from Schneider Electric, France. An access control error vulnerability exists in the Schneider Electric Interactive Graphical...

Schneider Electric Interactive Graphical SCADA System Out-of-Bounds Read Vulnerability

Schneider Electric Interactive Graphical SCADA System IGSS is a SCADA Data Acquisition and Supervisory System system for monitoring and controlling industrial processes from Schneider Electric, France. An out-of-bounds read vulnerability exists in the Schneider Electric Interactive Graphical SCAD...

Interactive Graphical SCADA System Data Server 安全漏洞

Schneider Electric Interactive Graphical SCADA System IGSS is a SCADA Data Acquisition and Supervisory System system for monitoring and controlling industrial processes from Schneider Electric, France. An initialization error vulnerability exists in the Schneider Electric Interactive Graphical...

Unspecified Vulnerability in Mitsubishi Electric MC Works64

Mitsubishi Electric MC Works64 is a data acquisition and monitoring system SCADA from Mitsubishi Electric Japan. A security vulnerability exists in the Mitsubishi Electric MC Works64 that originates in ICONICS and the Mitsubishi Electric ICONICS product suite, where the FrameWorX server in the...

Mitsubishi Electric MC Works64 Cross-Site Scripting Vulnerability

Mitsubishi Electric MC Works64 is a data acquisition and monitoring system SCADA from Mitsubishi Electric Japan. Mitsubishi Electric MC Works64 suffers from a cross-site scripting vulnerability that stems from a lack of checksum filtering of user-supplied data and output. An attacker could exploi...

Your guide to mobile digital forensics

The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest Voice of the Community blog series post, Microsoft Security Product Marketing Manager Natalia Godyla talks with Cellebrite Senior Director of...

Your guide to mobile digital forensics

The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest Voice of the Community blog series post, Microsoft Security Product Marketing Manager Natalia Godyla talks with Cellebrite Senior Director of...