EUVD-2014-8488

Malware in sbrugna...

Elipse E3 Process Control Vulnerability

OVERVIEW Ivan Sanchez from Nullcode Team has identified a process control vulnerability in the Elipse E3 application. The process control vulnerability is a result of a third-party DLL, developed by Telerik, which is used in the Elipse E3 application. Elipse has released a new version that...

Elipse E3 Process Control Vulnerability (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-069-04 Elipse E3 Process Control Vulnerability that was published March 10, 2015, on the NCCIC/ICS-CERT web site. Ivan Sanchez from Nullcode Team has identified a process control vulnerability in the Elipse E3...

CVE-2015-0978

Multiple untrusted search path vulnerabilities in 1 EQATEC.Analytics.Monitor.Win32vc100.dll and 2 EQATEC.Analytics.Monitor.Win32vc100-x64.dll in Elipse E3 4.5.232 through 4.6.161 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory. NOTE: this may overlap...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in 1 EQATEC.Analytics.Monitor.Win32vc100.dll and 2 EQATEC.Analytics.Monitor.Win32vc100-x64.dll in Elipse E3 4.5.232 through 4.6.161 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory. NOTE: this may overlap...

CVE-2015-0978

Multiple untrusted search path vulnerabilities in 1 EQATEC.Analytics.Monitor.Win32vc100.dll and 2 EQATEC.Analytics.Monitor.Win32vc100-x64.dll in Elipse E3 4.5.232 through 4.6.161 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory. NOTE: this may overlap...

CVE-2015-0978

CVE-2015-0978 affects Elipse E3 up to 4.6.161 and the Telerik EQATEC Analytics Monitor DLLs (Win32 vc100.dll and Win32 vc100-x64.dll). The vulnerability arises from untrusted DLL loading (OpenSSL-related) that can allow a local attacker to execute arbitrary code by convincing a user to load a mal...

CVE-2015-0978: Undefined Security Weakness

Multiple untrusted search path vulnerabilities in 1 EQATEC.Analytics.Monitor.Win32vc100.dll and 2 EQATEC.Analytics.Monitor.Win32vc100-x64.dll in Elipse E3 4.5.232 through 4.6.161 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory. NOTE: this may overlap...

PT-2015-5000

Name of the Vulnerable Software and Affected Versions Elipse E3 versions 4.5.232 through 4.6.161 Description The issue allows local users to gain privileges via a Trojan horse DLL in an unspecified directory, due to multiple untrusted search path vulnerabilities in EQATEC.Analytics.Monitor.Win32...

Elipse E3 Process Control Vulnerability

Elipse E3 is the monitoring control and data acquisition system. A process control vulnerability in the Elipse E3 application caused by a third-party DLL can be successfully exploited to cause arbitrary code execution...

Elipse E3 HTTP Denial of Service Exploit

Exploit for windows platform in category dos / poc // Exploit Http DoS Request for SCADA ATTACK Elipse 3 // Mauro Risonho de Paula Assumpção aka firebits // email protected // 29-10-2013 11:42 // Vendor Homepage: http://www.elipse.com.br/port/index.aspx // Software Link:...

Elipse E3 - HTTP Denial of Service

Elipse E3 - HTTP Denial of Service // Exploit Http DoS Request for SCADA ATTACK Elipse 3 // Mauro Risonho de Paula Assumpção aka firebits // [email protected] // 29-10-2013 11:42 // Vendor Homepage: http://www.elipse.com.br/port/index.aspx // Software Link:...

CVE-2014-8652

Elipse E3 3.x and earlier allows remote attackers to cause a denial of service application crash and plant outage via a rapid series of HTTP requests to index.html on TCP port 1681...

Code injection

Elipse E3 3.x and earlier allows remote attackers to cause a denial of service application crash and plant outage via a rapid series of HTTP requests to index.html on TCP port 1681...

CVE-2014-8652

Elipse E3 3.x and earlier allows remote attackers to cause a denial of service application crash and plant outage via a rapid series of HTTP requests to index.html on TCP port 1681...

CVE-2014-8652

Elipse E3 3.x and earlier is affected by CVE-2014-8652. The issue allows remote attackers to cause a denial of service (application crash and plant outage) by sending a rapid series of HTTP requests to index.html on TCP port 1681. The Exploit/Malware entries corroborate a Windows-based PoC/DoS te...

PT-2014-8658

Name of the Vulnerable Software and Affected Versions Elipse E3 versions 3.x and earlier Description The issue allows remote attackers to cause a denial of service, resulting in an application crash and potentially a plant outage. This can be achieved by sending a rapid series of HTTP requests to...

CVE-2014-8652: Undefined Security Weakness

Elipse E3 3.x and earlier allows remote attackers to cause a denial of service application crash and plant outage via a rapid series of HTTP requests to index.html on TCP port 1681...

Elipse E3 Scada PLC Denial Of Service

VSLA Security Advisory FIRE-SCADA-DOS-2013-001: Http DoS Requests Flooding Crash Device Vulnerabilities Elipse E3 Scada PLC. LEVEL: EXTREME In our tests authorized by the customer, we can stop the entire plant. Published: 10/29/2013 Version: 1.0 Vendor: Elipse...