Protecting Critical Infrastructure from Cyber Threats

October is National Cybersecurity Awareness Month, an annual campaign to raise awareness about cybersecurity. Building resilience in critical infrastructure is crucial to national security. The essential infrastructure systems that support our daily lives—such as electricity, financial...

Worry-Free Electricity Android APP has Arbitrary Account Password Reset Vulnerability

Electricity Worry-free APP is a cross electrical equipment professional service platform. Electricity Worry-free Android APP has an arbitrary account password reset vulnerability. The vulnerability allows attackers to use the vulnerability to change the password of the other party's cell phone...

Denial of Service Vulnerability in Electricity Free Android App

Electricity Worry-free APP is a cross electrical equipment professional service platform. A denial of service vulnerability exists in the Electricity Worry Free Android APP. It allows an attacker to traverse a cell phone number and send unlimited CAPTCHAs to the cell phone, consuming server...

Command injection

A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c and prior, SenNet Solar Datalogger V5.03-1.56a and prior, and SenNet Multitask Meter V5.21a-1.18b and prior. Successful exploitation of this vulnerability cou...

CVE-2017-6048

A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c and prior, SenNet Solar Datalogger V5.03-1.56a and prior, and SenNet Multitask Meter V5.21a-1.18b and prior. Successful exploitation of this vulnerability cou...

CVE-2017-6048

A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c and prior, SenNet Solar Datalogger V5.03-1.56a and prior, and SenNet Multitask Meter V5.21a-1.18b and prior. Successful exploitation of this vulnerability cou...

CVE-2017-6048

CVE-2017-6048 is an OS Command Injection affecting Satel Iberia SenNet Data Logger and Electricity Meters (SenNet Optimal DataLogger V5.37c-1.43c and prior; SenNet Solar Datalogger V5.03-1.56a and prior; SenNet Multitask Meter V5.21a-1.18b and prior). The flaw enables arbitrary command execution ...

Satel Iberia SenNet Data Logger and Electricity Meters

CVSS v3 8.8 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: Satel Iberia Equipment: SenNet Data Logger and Electricity Meters Vulnerability: Command Injection AFFECTED PRODUCTS The following versions of SenNet Data Logger and Electricity Meters, monitoring platforms, are...

SenNet Data Logger Appliances and Electricity Meters Multiple Vulnerabilities

The remote SenNet Appliances is affected by multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Satel Iberia SenNet Data Logger and Electricity Meters Command Injection Vulnerability

This module exploits an OS Command Injection vulnerability in Satel Iberia SenNet Data Loggers & Electricity Meters to perform arbitrary command execution as 'root'. Module Options msf use auxiliary/scanner/telnet/satel/cmdexec msf undefinedcmdexec show actions ...actions... msf undefinedcmdexec...

SenNet Data Logger / Electricity Meter Code Execution

SenNet Data Logger appliances and Electricity Meters Multiple Vulnerabilities Note: Vendor has released the fix. Details to be documented in ICS-CERT Advisory. About SenNet is a trademark of Satel Spain that offers monitoring and remote-control solutions for businesses. Our engineers develop,...

Threat Outbreak Alert RuleID28316: Email Messages Distributing Malicious Software on March 15, 2017

Medium Alert ID: 53040 First Published: 2017 March 15 17:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28316 may contain the following files: Name | Si...

Mitsubishi Outlander Car's Theft Alarm Hacked through Wi-Fi

From GPS system to satellite radio to wireless locks, today vehicles are more connected to networks than ever, and so they are more hackable than ever. It is not new for security researchers to hack connected cars. Latest in the series of hackable connected cars is the Mitsubishi Outlander plug-i...

uswitch.com XSS vulnerability

Vulnerable URL: http://www.uswitch.com/gas-electricity/drop?postcode=...

uswitch.com XSS vulnerability

Vulnerable URL: http://www.uswitch.com/gas-electricity/drop Details: Description| Value ---|--- Patched:| Yes, at 05.01.2017 Latest check for patch:| 05.01.2017 14:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9744 Google Pagerank| 6 VIP website status:| Ye...

Threat Outbreak Alert: Fake Electricity Bill Notification Email Messages on January 19, 2014

Medium Alert ID: 32484 First Published: 2014 January 21 15:51 GMT Last Updated: 2014 January 22 15:12 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an electricity bill for the recipient. The text in the email message...

CVE-2013-2292

bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service electricity consumption by mining a block to create a nonstandard Bitcoin transaction containing multiple OPCHECKSIG script opcodes...

Code injection

bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service electricity consumption by mining a block to create a nonstandard Bitcoin transaction containing multiple OPCHECKSIG script opcodes...

CVE-2013-2292

bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service electricity consumption by mining a block to create a nonstandard Bitcoin transaction containing multiple OPCHECKSIG script opcodes...

ENISA Outlines Security Regulations for EU Smart Grid Expansion

The European Union has set a series of ambitious goals for itself: by 2020, the 27 member states expect to collectively use 20 percent renewable energy, reduce CO2 emissions by 20 percent, and increase energy efficiency by 20 percent. In order to accomplish these goals, Europe will need to perfor...