CVE-2020-9002

An issue was discovered in iPortalis iCS 7.1.13.0. An attacker can gain privileges by intercepting a request and changing UserRoleKey=COMPANYADMIN to UserRoleKey=DOMAINADMIN to achieve Domain Administrator access...

CVE-2020-9002

An issue was discovered in iPortalis iCS 7.1.13.0. An attacker can gain privileges by intercepting a request and changing UserRoleKey=COMPANYADMIN to UserRoleKey=DOMAINADMIN to achieve Domain Administrator access...

CVE-2020-9000

An issue was discovered in iPortalis iCS 7.1.13.0. Attackers can send a sequence of requests to rapidly cause .NET Input Validation errors. This increases the size of the log file on the remote server until memory is exhausted, therefore consuming the maximum amount of resources triggering a deni...

CVE-2020-9000

An issue was discovered in iPortalis iCS 7.1.13.0. Attackers can send a sequence of requests to rapidly cause .NET Input Validation errors. This increases the size of the log file on the remote server until memory is exhausted, therefore consuming the maximum amount of resources triggering a deni...

Design/Logic Flaw

An issue was discovered in iPortalis iCS 7.1.13.0. Attackers can send a sequence of requests to rapidly cause .NET Input Validation errors. This increases the size of the log file on the remote server until memory is exhausted, therefore consuming the maximum amount of resources triggering a deni...

Design/Logic Flaw

An issue was discovered in iPortalis iCS 7.1.13.0. An attacker can gain privileges by intercepting a request and changing UserRoleKey=COMPANYADMIN to UserRoleKey=DOMAINADMIN to achieve Domain Administrator access...

CVE-2020-9002

An issue was discovered in iPortalis iCS 7.1.13.0. An attacker can gain privileges by intercepting a request and changing UserRoleKey=COMPANYADMIN to UserRoleKey=DOMAINADMIN to achieve Domain Administrator access...

CVE-2020-9002

CVE-2020-9002 affects iPortalis iCS 7.1.13.0. An attacker can escalate privileges by intercepting a request and changing UserRoleKey=COMPANY_ADMIN to DOMAIN_ADMIN, granting Domain Administrator access. Details across sources consistently describe a privilege escalation via improper validation of ...

CVE-2020-9000

CVE-2020-9000 affects iPortalis iCS 7.1.13.0. The issue arises from .NET input validation that allows an attacker to send a sequence of requests to rapidly enlarge the remote server’s log file, causing memory exhaustion and a denial-of-service condition. The Real-world exposure is network-accessi...

iPortalis 资源管理错误漏洞

iPortalis is providing management of Microsoft licenses, costs, governance and reporting capabilities. A resource management error vulnerability exists in iPortalis iCS that stems from the product's failure to add valid validation for log file sizes. An attacker could cause a denial of service by...

iPortalis 输入验证错误漏洞

iPortalis is providing management of Microsoft licenses, costs, governance and reporting capabilities. An input validation error vulnerability exists in iPortalis iCS that stems from not adding a valid privilege authentication to a UserRoleKey=request. An attacker could gain domain administrative...

CISA Releases Security Advisory for InterNiche Products

CISA has released an Industrial Control Systems ICS advisory detailing multiple vulnerabilities in InterNiche products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the ICS Advisory ICSA-21-217-01...

CISA Releases Security Advisory for Geutebruck Devices

CISA has released an Industrial Control Systems ICS advisory detailing multiple vulnerabilities in multiple Geutebruck G-CAM E2 series devices and Encoder G-Code versions. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users an...

LCDS LAquis SCADA

1. EXECUTIVE SUMMARY CVSS v3 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: LCDS—Leão Consultoria e Desenvolvimento de Sistemas Ltda ME Equipment: LAquis SCADA Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an...

IoT Piranhas Are Swarming Industrial Controls

Full transparency: Curtis Simpson, CISO at Armis, the enterprise IoT security company, was fundamentally a black hat at the age of 12, before he even knew what a black hat was. One day he got flooded over IRC and was fascinated: What just happened? And how did it happen? He’s since spent the vast...

ICS Focused Malware

Updated July 20, 2021: The U.S. Government attributes this activity to Russian nation-state cyber actors and assess that Russian nation-state cyber actors deployed Havex malware against industrial control systems. For more information on Russian malicious cyber activity, refer...

Significant Historical Cyber-Intrusion Campaigns Targeting ICS

Protecting our Nation’s critical infrastructure is the responsibility of federal and state, local, tribal, and territorial SLTT governments and owners and operators of that infrastructure. The cybersecurity threats posed to the industrial control systems ICS that control and operate critical...

Schneider Electric Modicon Controllers and Software (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor : Schneider Electric Equipment : EcoStruxure Control Expert, EcoStruxure Process Expert, SCADAPack RemoteConnect x70, SCADAPack x70 RTUs, and Modicon M580 and M340 control products Vulnerabilities :...

Backdoor.Win32.NerTe.a Authentication Bypass / Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/125364b0cdae80c10f00b75c8e2cfa47.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.NerTe.a Vulnerability: Authentication Bypass RCE Description: The malware listens on...

CISA’s CSET Tool Sets Sights on Ransomware Threat

CISA has released a new module in its Cyber Security Evaluation Tool CSET: the Ransomware Readiness Assessment RRA. CSET is a desktop software tool that guides network defenders through a step-by-step process to evaluate their cybersecurity practices on their networks. CSET—applicable to both...