Advantech WebAccess stack buffer overflow vulnerability (CNVD-2016-00434)

WebAccess HMI/SCADA software provides remote control and management, allowing users to easily view and configure automation devices in facility management systems, power stations and building automation systems. Multiple stack buffer overflow vulnerabilities exist in Advantech WebAccess versions...

The vulnerabilities of the software programs WinCC, Simatic NET PC-Software, Simatic Automation Tool, and Simatic HMI allow a perpetrator to successfully pass the authentication process.

The vulnerabilities of the WinCC software, Simatic NET PC-Software, Simatic Automation Tool, and Simatic HMI are related to deficiencies in password verification procedures. Exploiting these vulnerabilities can allow unauthorized users to successfully authenticate themselves by using the hash val...

Advantech WebAccess Heap Buffer Overflow Vulnerability

Advantech WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech, China. A heap buffer overflow vulnerability exists in Advantech WebAccess. A local attacker could exploit this vulnerability to execute arbitrary code, which could also result in a denial of service...

Siemens SIMATIC and SIMATIC WinCC HMI Comfort Panels Denial of Service Vulnerability

Siemens SIMATIC WinCC is a complete Supervisory Control and Data Acquisition SCADA solution for industry, ranging from single-user systems to multi-user systems supporting redundant servers and remote Web client solutions. A security vulnerability in Siemens SIMATIC HMI Comfort Panels WinCC TIA...

Inductive Automation Ignition Cross-Site Scripting Vulnerability

Ignition is an updated version of FactoryPMI, the HMI/SCADA product offered by Inductive Automation. Ignition has a security vulnerability that can be exploited by an attacker to execute malicious content in a vulnerable web application. The server reads data directly from the HTTP request and th...

Schneider Electric ETG3000 FactoryCast HMI Gateway Authentication Bypass Vulnerability

The Schneider Electric ETG3000 FactoryCast HMI Gateway is a Web-based SCADA system. An authentication bypass vulnerability exists in the Schneider Electric ETG3000 FactoryCast HMI Gateway, which can be exploited by an attacker to bypass the authentication mechanism and gain unauthorized access to...

CVE-2010-4597

Ecava IntegraXor HMI is affected by CVE-2010-4597 due to a stack-based buffer overflow in the save method of igcomm.dll (IntegraXor.Project ActiveX) prior to version 3.5.3900.10. An attacker could remotely trigger arbitrary code execution by sending a long string in the second argument. ICS-CERT ...

CVE-2010-4597: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraXor Human-Machine Interface HMI before 3.5.3900.10 allows remote attackers to execute arbitrary code via a long string in the second argument...