CVE-2012-1990

Multiple cross-site scripting XSS vulnerabilities in Schneider Electric Kerweb before 3.0.1 and Kerwin before 6.0.1 allow remote attackers to inject arbitrary web script or HTML via 1 the evtvariablename parameter in an evts.xml action to kw.dll, 2 unspecified search fields, or 3 unspecified...

CVE-2012-1990

CVE-2012-1990 describes multiple cross-site scripting (XSS) vulnerabilities in Schneider Electric Kerweb (before 3.0.1) and Kerwin (before 6.0.1). The issues allow remote attackers to inject arbitrary web script or HTML via (1) the evtvariablename parameter in an evts.xml action to kw.dll, (2) un...

Schneider Electric Telecontrol Kerweb 3.0.06.0.0 - kw.dll HTML Injection

Schneider Electric Telecontrol Kerweb 3.0.06.0.0 - kw.dll HTML Injection source: https://www.securityfocus.com/bid/53409/info Multiple Schneider Electric Telecontrol products are prone to an HTML-injection vulnerability because they fail to sufficiently sanitize user-supplied data before it is us...

Schneider Electric Telecontrol Kerweb 3.0.0/6.0.0 - 'kw.dll' HTML Injection

source: https://www.securityfocus.com/bid/53409/info Multiple Schneider Electric Telecontrol products are prone to an HTML-injection vulnerability because they fail to sufficiently sanitize user-supplied data before it is used in dynamic content. Attacker-supplied HTML or JavaScript code could ru...

Project Basecamp Adds Stuxnet-type Attack Module to Metasploit

UPDATE: Project Basecamp, a volunteer effort to expose security holes in industrial control system software, unveiled new modules on Thursday to exploit holes in common programmable logic controllers PLCs. The new exploits, which are being submitted to the Metasploit open platform, include one th...

Enterprise into the Electric Company enterprise website management system v1. 0(English version)vulnerability-vulnerability warning-the black bar safety net

File: Company. asp % ID=trimrequest. QueryString"id" if ID="" then ID=1 set Rs = server. createobject"adodb. recordset" Rs. source = "select from Company where ID="&ID&"" Rs. open Rs. source,conn,1,3 if Rs. eof then Content="also did not add relevant content!" else Kig=Rs"Kig" Rs"kig"=Kig+1 Rs...

Schneider Electric ClearSCADA Server Detection (HTTP)

Binary data 6313.prm...

CVE-2012-0929

Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service via malformed requests to the 1 FTP server or 2 HTTP server...

CVE-2012-0930

Cross-site scripting XSS vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0931

Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Authentication flaw

Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors...

Buffer overflow

Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service via malformed requests to the 1 FTP server or 2 HTTP server...

CVE-2012-0931

Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors...

CVE-2012-0931

CVE-2012-0931 concerns Schneider Electric Modicon Quantum PLC. The issue is an authentication gap between the Unity software and the PLC, allowing remote attackers to cause a denial of service or potentially execute arbitrary code via unspecified vectors. Several connected sources (NVD, Tenable O...

CVE-2012-0929

Schneider Electric Modicon Quantum PLC is affected by CVE-2012-0929 due to multiple buffer overflows in the PLC’s FTP and HTTP servers. Remote attackers can trigger a denial of service by sending malformed requests to either service. The publicly available details show the impact as DoS with netw...

CVE-2012-0930

The CVE-2012-0930 entry concerns the Schneider Electric Modicon Quantum PLC. All connected sources describe a Cross-Site Scripting (XSS) vulnerability in the Quantum PLC’s web context, enabling remote attackers to inject arbitrary web script or HTML via unspecified vectors. The affected component...

CVE-2012-0930

Cross-site scripting XSS vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0929

Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service via malformed requests to the 1 FTP server or 2 HTTP server...

General Electric D20ME TFTP Server Buffer Overflow DoS

By sending a malformed TFTP request to the GE D20ME, it is possible to crash the device. This module is based on the original 'd20ftpbo.rb' Basecamp module from DigitalBond. Module Options msf use auxiliary/dos/scada/d20/tftpoverflow msf undefinedtftpoverflow show actions ...actions... msf...