8857 matches found
CVE-2013-2824
CVE-2013-2824 affects Schneider Electric StruxureWare SCADA Expert Vijeo Citect (v7.40), Vijeo Citect (v7.20–7.30SP1), CitectSCADA (v7.20–7.30SP1), StruxureWare PowerSCADA Expert (v7.30–7.30SR1), and PowerLogic SCADA (v7.20–7.20SR1). The issue is an exception-handling flaw that allows remote atta...
Mitsubishi Electric Automation MC-WorX 8.x ActiveX Control Remote Code Execution
Binary data scadamitsubishimc-worx8activex.nbin...
PT-2014-2010
Name of the Vulnerable Software and Affected Versions Schneider Electric StruxureWare SCADA Expert Vijeo Citect versions 7.40 Schneider Electric Vijeo Citect versions 7.20 through 7.30SP1 Schneider Electric CitectSCADA versions 7.20 through 7.30SP1 Schneider Electric StruxureWare PowerSCADA Exper...
CVE-2013-2824: Undefined Security Weakness
Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to...
Mitsubishi Electric Automation MC-WorX Suite Detection
Binary data scadaappmitsubishimc-worxdetect.nbin...
CVE-2013-2817
An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click...
Hardcoded credentials
An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click...
CVE-2013-2817
The vulnerability CVE-2013-2817 affects Mitsubishi Electric Automation MC-WorX Suite 8.02 via the IcoLaunch.dll ActiveX control. The insecure control (Exposed Dangerous Method or Function CWE-749) can be used to execute arbitrary code when a user visits a crafted HTML document and clicks the Logi...
CVE-2013-2817
An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click...
PT-2014-2634
Name of the Vulnerable Software and Affected Versions Mitsubishi Electric Automation MC-WorX Suite version 8.02 Description The issue allows remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click. This is made possible by a...
CVE-2013-2817: Improper Control of Generation of Code
An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click...
Schneider Electric Wonderware Intelligence Security Patch for OpenSSL Vulnerability
OVERVIEW Schneider Electric Wonderware’s Cyber Security Team has identified an OpenSSL Heartbleed vulnerability in the Wonderware Intelligence application, caused by a third-party component. Schneider Electric Wonderware has produced a patch that mitigates this vulnerability. This vulnerability...
Schneider Electric Telvent SAGE 3030 RTU远程拒绝服务漏洞
BUGTRAQ ID: 65262 CVECAN ID: CVE-2013-6143 Telvent SAGE 3030 RTU是工业数据通信设备。 Telvent SAGE 3030 RTU C3413-500-001D3P4、C3413-500-001F0PB处理某些输入时，DNP3服务存在错误，可导致崩溃，造成拒绝服务。 0 Schneider Electric Telvent SAGE 3030 RTU C3413-500-001F0PB Schneider Electric Telvent SAGE 3030 RTU C3413-500-001D3P4 厂商补丁：...
Schneider Electric SCADAPack VxWorks Debugger漏洞
施耐德电气集团对能源和基础设施、工业、数据中心和网络、楼宇以及住宅等领域提供产品和服务。 Schneider Electric SCADAPack 330, 334, 350, 357产品由于启用了VxWorks调试代理存在安全漏洞，远程攻击者通过发送特制的请求到UDP端口17185，利用此漏洞可控制受影响设备。 0 Schneider Electric SCADAPack 35x Schneider Electric SCADAPack 33x 厂商补丁： Schneider Electric ------------------...
CVE-2013-6143
The Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3P4 and C3413-500-001F0PB allows remote attackers to cause a denial of service temporary outage and CPU consumption via malformed DNP3 traffic...
Code injection
The Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3P4 and C3413-500-001F0PB allows remote attackers to cause a denial of service temporary outage and CPU consumption via malformed DNP3 traffic...
CVE-2013-6143
CVE-2013-6143 affects Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3_P4 and C3413-500-001F0_PB. The root cause is improper input validation in the DNP3 service, allowing remote attackers to cause a denial of service (temporary outage and CPU consumption) via malformed DNP3...
CVE-2013-6143
The Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3P4 and C3413-500-001F0PB allows remote attackers to cause a denial of service temporary outage and CPU consumption via malformed DNP3 traffic...
PT-2014-3032
Name of the Vulnerable Software and Affected Versions Schneider Electric Telvent SAGE 3030 RTU versions C3413-500-001D3 P4 through C3413-500-001F0 PB Description The issue allows remote attackers to cause a denial of service, resulting in a temporary outage and increased CPU consumption, via...
Electric Cybersecurity Regulations Have Serial Problem
A class of SCADA vulnerabilities discussed at a recent conference is getting attention not only for the risks they pose to master control systems at electric utilities, but also for illuminating a dangerous gap in important critical infrastructure regulations. Researchers Adam Crain and Chris...