100 matches found
DCCE MAC1100 PLC suffers from an information disclosure vulnerability (CNVD-2018-08782)
MAC1100 PLC programmable logic controller PLC is a product in the programmable logic controller PLC series of Dalian Computer Control DCCE. The product is widely used in intelligent buildings, power data monitoring, heat control system, enterprise management system and other important industrial...
CVE-2017-16673
Datto Backup Agent 1.0.6.0 and earlier does not authenticate incoming connections. This allows an attacker to impersonate a Datto Backup Appliance to "pair" with the agent and issue requests to this agent, if the attacker can reach the agent on TCP port 25566 or 25568, and send unspecified...
IoT Device Security At Home
My girlfriend read something that worried her about the security risks posed by Internet of Things IoT devices at home. She had recently purchased a new TV, and she has an older home security system. She asked if her privacy might be at risk. We talked about the kinds of problems an unprotected...
openwebnet-discovery NSE Script
OpenWebNet is a communications protocol developed by Bticino since 2000. Retrieves device identifying information and number of connected devices. References: Example Usage nmap --script openwebnet-discovery Script Output | openwebnet-discover: | IP Address: 192.168.200.35 | Net Mask: 255.255.255...
Деанонимизация пользователей Darknet(TOR, i2p(d), etc) & SOX &VPN аудиозакладками
Вообщем то ссылка на 33с3 уже была запощена в основном топике, но я хотел бы акцентировать общее внимание на презентацию Talking Behind Your Back On the Privacy & Security of the Ultrasound Tracking Ecosystem от Vasilios Mavroudis и Federico Maggi. Вкратце, суть такова: В 2012 году была основана...
Network Security Testing: Evil Foca
Evil Foca is a tool for security pentesters and auditors whose purpose it is to test security in IPv4 and IPv6 data networks. The software automatically scans the networks and identifies all devices and their respective network interfaces, specifying their IPv4 and IPv6 addresses as well as the...
EtherNet/IP CIP Device Identification
Binary data scadaciplistidentity.nbin...
Modbus/TCP Device Identification
Binary data scadamodbusdevidcheck.nbin...
MODBUS/TCP Device Identification Object Detection
Binary data 7148.pasl...
Wireless Network Watcher - Show who is connected to your wireless network
Wireless Network Watcher is a small utility that scans your wireless network and displays the list of all computers and devices that are currently connected to your network. For every computer or device that is connected to your network, the following information is displayed: IP address, MAC...
MODBUS/TCP 'Device Identification' Function Code Detection
Binary data 7105.pasl...
[NetSleuth] Open source Network Forensics And Analysis Tools
NetSleuth identifies and fingerprints network devices by silent network monitoring or by processing data from PCAP files. NetSleuth is an opensource network forensics and analysis tool, designed for triage in incident response situations. It can identify and fingerprint network hosts and devices...
Non Compliant Scada Modbus Read Device ID Query
...
Scada Modbus Read Device Identification
There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...
MODBUS Client 'Read Device Identification' Request (SCADA) (deprecated)
Binary data 6260.prm...
ESA-2011-036: RSA, The Security Division of EMC, announces the release of a Security Fix for RSA(r) Adaptive Authentication (On-Premise)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-036: RSA, The Security Division of EMC, announces the release of a Security Fix for RSA® Adaptive Authentication On-Premise Advisories Updated December 6, 2011 Summary: An issue with RSA® Adaptive Authentication On-Premise was discovered whic...
Design/Logic Flaw
EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly implement Device Recovery and Device Identification, which might allow remote attackers to bypass intended security restrictions on a 1 previously non-registered device or...
CVE-1999-0453
An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol CDP...
PT-1999-1136 · Cisco · Cisco
Name of the Vulnerable Software and Affected Versions: CISCO affected versions not specified Description: The issue allows an attacker to identify a CISCO device. This can be achieved by sending a SYN packet to port 1999, which is used for the Cisco Discovery Protocol CDP. Recommendations: At the...
