CVE-2012-1990: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Schneider Electric Kerweb before 3.0.1 and Kerwin before 6.0.1 allow remote attackers to inject arbitrary web script or HTML via 1 the evtvariablename parameter in an evts.xml action to kw.dll, 2 unspecified search fields, or 3 unspecified...

Schneider Electric Telecontrol Kerweb 3.0.0/6.0.0 - 'kw.dll' HTML Injection

source: https://www.securityfocus.com/bid/53409/info Multiple Schneider Electric Telecontrol products are prone to an HTML-injection vulnerability because they fail to sufficiently sanitize user-supplied data before it is used in dynamic content. Attacker-supplied HTML or JavaScript code could ru...

Schneider Electric Telecontrol Kerweb 3.0.06.0.0 - kw.dll HTML Injection

Schneider Electric Telecontrol Kerweb 3.0.06.0.0 - kw.dll HTML Injection source: https://www.securityfocus.com/bid/53409/info Multiple Schneider Electric Telecontrol products are prone to an HTML-injection vulnerability because they fail to sufficiently sanitize user-supplied data before it is us...

Project Basecamp Adds Stuxnet-type Attack Module to Metasploit

UPDATE: Project Basecamp, a volunteer effort to expose security holes in industrial control system software, unveiled new modules on Thursday to exploit holes in common programmable logic controllers PLCs. The new exploits, which are being submitted to the Metasploit open platform, include one th...

Enterprise into the Electric Company enterprise website management system v1. 0(English version)vulnerability-vulnerability warning-the black bar safety net

File: Company. asp % ID=trimrequest. QueryString"id" if ID="" then ID=1 set Rs = server. createobject"adodb. recordset" Rs. source = "select from Company where ID="&ID&"" Rs. open Rs. source,conn,1,3 if Rs. eof then Content="also did not add relevant content!" else Kig=Rs"Kig" Rs"kig"=Kig+1 Rs...

Schneider Electric ClearSCADA Server Detection (HTTP)

Binary data 6313.prm...

CVE-2012-0931

Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors...

CVE-2012-0930

Cross-site scripting XSS vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0929

Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service via malformed requests to the 1 FTP server or 2 HTTP server...

Buffer overflow

Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service via malformed requests to the 1 FTP server or 2 HTTP server...

Authentication flaw

Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0929

Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service via malformed requests to the 1 FTP server or 2 HTTP server...

CVE-2012-0930

Cross-site scripting XSS vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0931

CVE-2012-0931 concerns Schneider Electric Modicon Quantum PLC. The issue is an authentication gap between the Unity software and the PLC, allowing remote attackers to cause a denial of service or potentially execute arbitrary code via unspecified vectors. Several connected sources (NVD, Tenable O...

CVE-2012-0930

The CVE-2012-0930 entry concerns the Schneider Electric Modicon Quantum PLC. All connected sources describe a Cross-Site Scripting (XSS) vulnerability in the Quantum PLC’s web context, enabling remote attackers to inject arbitrary web script or HTML via unspecified vectors. The affected component...

CVE-2012-0929

Schneider Electric Modicon Quantum PLC is affected by CVE-2012-0929 due to multiple buffer overflows in the PLC’s FTP and HTTP servers. Remote attackers can trigger a denial of service by sending malformed requests to either service. The publicly available details show the impact as DoS with netw...

CVE-2012-0931

Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors...

CVE-2012-0930: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0929: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service via malformed requests to the 1 FTP server or 2 HTTP server...