CVE-2013-2790

The master-station DNP3 driver before driver19.exe, and Beta2041.exe, in IOServer allows remote attackers to cause a denial of service infinite loop via crafted DNP3 packets to TCP port 20000...

CVE-2013-2790

The master-station DNP3 driver before driver19.exe, and Beta2041.exe, in IOServer allows remote attackers to cause a denial of service infinite loop via crafted DNP3 packets to TCP port 20000...

CVE-2013-2790

The CVE-2013-2790 vulnerability affects IOServer’s master-station DNP3 driver prior to driver19.exe and Beta2041.exe. It stems from improper input validation on TCP port 20000 (DNP3), allowing remote attackers to trigger an infinite loop and cause a denial of service. ICS-CERT confirms remote exp...

CVE-2013-2790: Improper Input Validation

The master-station DNP3 driver before driver19.exe, and Beta2041.exe, in IOServer allows remote attackers to cause a denial of service infinite loop via crafted DNP3 packets to TCP port 20000...

CVE-2013-2783

The DNP3 driver in IOServer drivers 1.0.19.0 allows remote attackers to cause a denial of service infinite loop or obtain unspecified control via crafted data to TCP port 20000...

Design/Logic Flaw

The DNP3 driver in IOServer drivers 1.0.19.0 allows remote attackers to cause a denial of service infinite loop or obtain unspecified control via crafted data to TCP port 20000...

CVE-2013-2783

The DNP3 driver in IOServer drivers 1.0.19.0 allows remote attackers to cause a denial of service infinite loop or obtain unspecified control via crafted data to TCP port 20000...

CVE-2013-2783

CVE-2013-2783 involves IOServer’s DNP3 driver (drivers 1.0.19.0). Affected component: TCP port 20000 input handling. Root cause: improper input validation can trigger an infinite loop, allowing remote attackers to cause a denial of service and potentially obtain unspecified control. Impact: remot...

CVE-2013-2783: Improper Input Validation

The DNP3 driver in IOServer drivers 1.0.19.0 allows remote attackers to cause a denial of service infinite loop or obtain unspecified control via crafted data to TCP port 20000...

IOServer Master Station Improper Input Validation

OVERVIEW Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation vulnerability in the IOServer DNP3 Driver on the master station. IOServer has produced a new version that mitigates this vulnerability. The researchers have tested the new versi...

IOServer DNP3 Improper Input Validation

OVERVIEW Adam Crain of Automatak and independent researcher Chris Sistrunk have identified improper input validation in IOServer’s DNP3 driver software. IOServer has produced an updated software version that mitigates this vulnerability. Adam Crain and Chris Sistrunk updated and tested this versi...

IOServer XML Server URI Directory Traversal Arbitrary File Access

Binary data scadaioserverxmlserverdirectorytraversal.nbin...

IOServer Detection

Binary data scadaappioserverinstalled.nbin...

CVE-2012-4680

Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks a trailing \ backslash character, allows remote attackers to read arbitrary files or list arbitrary directories via a .. dot dot in a URI...

Directory traversal

Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks a trailing \ backslash character, allows remote attackers to read arbitrary files or list arbitrary directories via a .. dot dot in a URI...

CVE-2012-4680

CVE-2012-4680 is a directory-traversal vulnerability in IOServer’s XML Server prior to version 1.0.19.0. When the Root Directory pathname lacks a trailing backslash, remote attackers can read arbitrary files or list directories via a .. in the URI. The issue affects IOServer XML Server components...

CVE-2012-4680

Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks a trailing \ backslash character, allows remote attackers to read arbitrary files or list arbitrary directories via a .. dot dot in a URI...

CVE-2012-4680: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks a trailing \ backslash character, allows remote attackers to read arbitrary files or list arbitrary directories via a .. dot dot in a URI...

IOServer 1.0.18.0 - Directory Traversal

IOServer 1.0.18.0 - Directory Traversal ===================================================================== BEGIN Foofus.net Security Advisory: foofus-20120817 BEGIN ===================================================================== Title: IOServer "Root Directory" Trailing Backslash Web...

IOServer 1.0.18.0 - Directory Traversal

===================================================================== BEGIN Foofus.net Security Advisory: foofus-20120817 BEGIN ===================================================================== Title: IOServer "Root Directory" Trailing Backslash Web Server Vuln Allows: Arbitrary File Access,...