smod

smod smod は、modbus プロトコルのペネトレーションテストに必要なあらゆる種類の診断機能と攻撃機能を備えたモジュラーフレームワークです。Python と Scapy を使用した完全な Modbus プロトコル実装です。このソフトウェアは、python 2.7.x で Linux/OSX 上で実行できます。 概要 SCADA（プロセス制御ネットワーク）ベースのシステムは、近年、プロプライエタリなクローズドネットワークからオープンソースソリューションや TCP/IP...

scada-scanner

SCADAスキャナーおよびフィンガープリンター 概要 ネットワーク上の産業用制御システムを識別し、フィンガープリントを取得するための、高性能な非同期SCADA/ICSスキャナーです。脆弱性を検出し、ベンダー/製品を特定して、包括的なリスクレポートを生成します。 警告: 許可されたセキュリティ評価専用です。無許可のスキャンは法律および規制に違反する可能性があります。 機能 中核機能 CIDR範囲または個別ターゲットの高速な非同期スキャン 主要な産業用プロトコルModbus、S7、DNP3、BACnet、EtherNet/IPなどのプロトコル検出...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

CVE-2026-9090-Modbus-TCP-Write-to-Read-Only-Coils-via-Function-Code-Spoofing

CVE-2026-9090 – 通过功能码欺骗对只读线圈进行 Modbus TCP 写入 程序代码（使用 pymodbus 模拟的 Python） modbusplcsim.py - Simulated Modbus PLC with read‑only coils from pymodbus.server.sync import StartTcpServer from pymodbus.device import ModbusDeviceIdentification from pymodbus.datastore import ModbusSequentialDataBlock fro...

CVE-2025-41656

CVE-2025-41656 プロジェクト概要 このプロジェクトは、NodeRED向けの認証なしリモートコード実行脆弱性である CVE-2025-41656 をモデル化するために存在します。この脆弱性をモデル化するために、ラズベリーパイ、アクチュエータ、センサーを使用した小型フォームファクタのSCADAシステムを作成しました。ラズベリーパイにはNodeREDとOpenPLCのコンテナが含まれており、Modbus...

modbus-scanner

Modbus Detection Scanner A multithreaded C scanner for detecting Modbus/TCP services using libmodbus. The scanner does not rely only on TCP port 502 being open. Instead, it establishes a Modbus/TCP connection and sends an application layer Modbus request. A valid Modbus response is used as the...

CVE-2026-18368

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service...

CVE-2026-18368

CVE-2026-18368 Explanation: Teltonika Networks RUTOS devices are affected via the modbusgwd component. The vulnerability arises from improper handling of Modbus TCP request data, enabling a remote, unauthenticated attacker with access to the affected service to trigger a heap-based buffer overflo...

CVE-2026-18368

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service...

CVE-2026-18368 Heap buffer overflow in Modbusgwd

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service...

CVE-2026-18368 Heap buffer overflow in Modbusgwd

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service...

CVE-2026-18368: Heap-based Buffer Overflow

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service...

Schneider Electric SCADAPack and RemoteConnect Improper Check For Unusual or Exceptional Conditions (CVE-2026-0667)

CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause remote code execution, denial of service, and loss of confidentiality and integrity of the RTU controller when an unauthenticated attacker sends specially crafted Modbus TCP packets to the device...

PT-2026-68136

Name of the Vulnerable Software and Affected Versions FreeModbus LINUXTCP port affected versions not specified Description The LINUXTCP port of FreeModbus contains an off-by-one bounds check within the xMBPortTCPPool function located in demo/LINUXTCP/port/porttcp.c. The issue occurs because the...

CVE-2026-44107 Exposed Reboot via Modbus

A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack...

CVE-2026-44107

CVE-2026-44107 describes an unauthenticated Denial-of-Service vulnerability in the Modbus TCP interface of the CharxModbusServer. If Modbus functionality is enabled by opening the port, an attacker can trigger a reboot of the charging controller via Modbus TCP without authentication, leading to s...

EUVD-2026-51042

A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack...

CVE-2026-44107: Exposed Dangerous Method or Function

A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack...

CVE-2026-0667

CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol...

CVE-2026-0667

CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol...