EUVD-2012-1822

Malware in sbrugna...

EUVD-2012-1821

Malware in sbrugna...

EUVD-2012-1820

Malware in sbrugna...

EUVD-2012-1823

Malware in sbrugna...

CVE-2012-1813

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 12000...

CVE-2012-1811

EOSDataServer.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 24006...

CVE-2012-1810

EOSCoreScada.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service daemon restart by sending data to TCP port 1 5050 or 2 24004...

CVE-2012-1812

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to obtain sensitive cleartext information via a session on TCP port 12000...

Code injection

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to obtain sensitive cleartext information via a session on TCP port 12000...

Code injection

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 12000...

Code injection

EOSDataServer.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 24006...

CVE-2012-1812

CVE-2012-1812 affects C3-ilex EOScada; vulnerability in the EOSfailoverservice.exe component exposes cleartext data via TCP port 12000. The issue is described as data leakage through an improper access control condition, affecting EOScada versions prior to 11.0.19.2. Impact includes potential dat...

CVE-2012-1812

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to obtain sensitive cleartext information via a session on TCP port 12000...

CVE-2012-1810

The CVE-2012-1810 vulnerability affects C3-ilex EOScada prior to version 11.0.19.2, where EOSCoreScada.exe can be triggered remotely via TCP ports 5050/TCP or 24004/TCP. The issue, described as improper access control, allows a remote attacker to cause a denial-of-service by sending data, leading...

CVE-2012-1813

CVE-2012-1813 concerns eosfailoverservice.exe in C3-ilex EOScada prior to 11.0.19.2. The vulnerability allows a remote attacker to cause a denial-of-service by sending a large amount of data to TCP port 12000, via the EOS failover service. The CVE entry specifies a DoS impact with a network attac...

CVE-2012-1811

CVE-2012-1811 affects C3-ilex EOScada, specifically the EOSDataServer.exe component. Before version 11.0.19.2, this service on TCP port 24006 is vulnerable to a Resource Management Error: sending a large amount of random data can cause a denial-of-service, resulting in the application crashing an...

CVE-2012-1813

eosfailoverservice.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 12000...

CVE-2012-1811

EOSDataServer.exe in C3-ilex EOScada before 11.0.19.2 allows remote attackers to cause a denial of service by sending a large amount of data to TCP port 24006...

C3-ilex EOScada Multiple Vulnerabilities

Overview This Advisory is a follow-up release to the original Advisory which was posted to the US-CERT secure Portal library October 08, 2012. Dale Peterson of Digital Bond has identified multiple vulnerabilities in the C3-ilex’s EOScada application that can result in data leakage and a...