Schneider Electric Accutech Manager - Heap Overflow (PoC)

Schneider Electric Accutech Manager Server Heap Overflow PoC RFManagerService - Port: 2537 I think this is the same vuln that ExodusIntel discovered. Credit also goes to Aaron Portnoy, ExodusIntel. The patch has not been released yet. Evren Yalcin, Signalsec Ltd. www.signalsec.com Download app:...

Schneider Electric Interactive Graphical SCADA System (IGSS) Unsupported Version

Binary data scadaigssunsupported.nbin...

Schneider Electric Interactive Graphical SCADA System dc.exe Unspecified Buffer Overflow

Binary data scadaigss90012331.nbin...

CVE-2013-0655

The client in Schneider Electric Software Update SESU Utility 1.0.x and 1.1.x does not ensure that updates have a valid origin, which allows man-in-the-middle attackers to spoof updates, and consequently execute arbitrary code, by modifying the data stream on TCP port 80...

CVE-2013-0657

Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System IGSS 10 and earlier allows remote attackers to execute arbitrary code by sending TCP port-12397 data that does not comply with a protocol...

Stack overflow

Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System IGSS 10 and earlier allows remote attackers to execute arbitrary code by sending TCP port-12397 data that does not comply with a protocol...

Code injection

The client in Schneider Electric Software Update SESU Utility 1.0.x and 1.1.x does not ensure that updates have a valid origin, which allows man-in-the-middle attackers to spoof updates, and consequently execute arbitrary code, by modifying the data stream on TCP port 80...

CVE-2013-0657

Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System IGSS 10 and earlier allows remote attackers to execute arbitrary code by sending TCP port-12397 data that does not comply with a protocol...

CVE-2013-0655

The client in Schneider Electric Software Update SESU Utility 1.0.x and 1.1.x does not ensure that updates have a valid origin, which allows man-in-the-middle attackers to spoof updates, and consequently execute arbitrary code, by modifying the data stream on TCP port 80...

CVE-2013-0655

The CVE-2013-0655 issue affects Schneider Electric Software Update (SESU) Utility, specifically versions 1.0.x and 1.1.x. The root cause is that the SESU client does not verify the origin of updates, enabling a man-in-the-middle to spoof updates by tampering with the data stream over TCP port 80,...

CVE-2013-0657

CVE-2013-0657 affects Schneider Electric IGSS (Interactive Graphical SCADA System) up to v10, where a stack-based buffer overflow on crafted input to TCP port 12397/12399 can lead to remote arbitrary code execution. The root cause is a buffer overflow in the DC.exe component (port 12397/tcp) trig...

CVE-2013-0657: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System IGSS 10 and earlier allows remote attackers to execute arbitrary code by sending TCP port-12397 data that does not comply with a protocol...

PT-2013-2507

Name of the Vulnerable Software and Affected Versions Schneider Electric Interactive Graphical SCADA System IGSS versions 10 and earlier Description The issue is related to a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This can be achieved by sending data...

CVE-2013-0655: Improper Input Validation

The client in Schneider Electric Software Update SESU Utility 1.0.x and 1.1.x does not ensure that updates have a valid origin, which allows man-in-the-middle attackers to spoof updates, and consequently execute arbitrary code, by modifying the data stream on TCP port 80...

Schneider Electric MiCOM S1 Studio Improper Authorization Vulnerability

Overview This advisory provides mitigation details for a vulnerability affecting the Schneider Electric MiCOM S1 Studio Software. Independent researcher Michael Toecker of Digital Bond has identified an improper authorization vulnerability in the MiCOM S1 Studio Software using the Microsoft Attac...

Schneider Modicon SCADA Remote START/STOP Command

A vulnerability has been reported in Schneider Electric Modicon Quantum. The vulnerability is due to the use of unauthenticated administrative function...

Schneider Modicon SCADA Ladder Logic Upload/Download

A vulnerability has been reported in Schneider Electric Modicon Quantum. The vulnerability is due to the use of unauthenticated administrative function...

General Electric D20 Password Recovery

A data leakage vulnerability has been reported in General Electric D20ME. The vulnerability is due to improper security restrictions. A remote attacker can exploit this issue by sending a specially crafted TFTP requests to the target. Successful exploitation would allow an attacker to steal...

CVE-2012-5862

These Sinapsi devices store hard-coded passwords in the PHP file of the device. By using the hard-coded passwords in the device, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access...

CVE-2012-5863

These Sinapsi devices do not check for special elements in commands sent to the system. By accessing certain pages with administrative privileges that do not require authentication within the device, attackers can execute arbitrary, unexpected, or dangerous commands directly onto the operating...