Advantech EKI Hard-coded SSH Keys Vulnerability

OVERVIEW Independent researcher Neil Smith has identified a hard-coded SSH key vulnerability in Advantech’s EKI-122X series products. Advantech has produced new firmware to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS Advantech reports that the...

CVE-2015-5374

CVE-2015-5374 affects Siemens SIPROTEC 4/Compact devices with EN100 Ethernet modules (PROFINET IO, Modbus TCP, DNP3 TCP, IEC 104 firmware) and SIPROTEC 6MU80 integration. The flaw is an improper input validation that allows specially crafted UDP packets to port 50000 to cause a denial-of-service,...

Modbus/TCP Report Slave ID

Binary data scadamodbusreptslvidcheck.nbin...

Modbus/TCP Device Identification

Binary data scadamodbusdevidcheck.nbin...

Unspecified Buffer Overflow Vulnerability in Advantech EKI-1200 Series

Advantech EKI-1200 Gateway is the EKI-1200 series Modbus data gateway product from Advantech China, which is mainly used to integrate Modbus/RTU and Modbus/ASCI serial devices into bi-directional gateways based on TCP/IP networks. An unspecified buffer overflow vulnerability exists in the Advante...

CVE-2014-9200

Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM...

CVE-2014-9200 Schneider Electric Device Type Managers (DTMs) Stack-based Buffer Overflow

Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library 2.2.6 and earlier, CANopen Communication Library 1.0.2 and earlier, EtherNet/IP Communication Library 1.0.0 and earlier, EM...

CVE-2014-9200

Schneider Electric CVE-2014-9200 is a stack-based buffer overflow in an unspecified DLL within DTMs used by Unity Pro, SoMachine, SoMove, SoMove Lite and related libraries (Modbus 2.2.6 and earlier, CANopen 1.0.2 and earlier, EtherNet/IP 1.0.0 and earlier, EM X80 Gateway DTM, Advantys DTMs, KINOS...

Schneider Electric Serial Modbus Driver Buffer Overflow (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-14-086-01A Schneider Electric Serial Modbus Driver Buffer Overflow that was published March 27, 2014, on the NCCIC/ICS-CERT web site. Carsten Eiram of Risk-Based Security has identified a stack-based buffer overflo...

MODBUS/TCP Device Identification Object Detection

Binary data 7148.pasl...

Tri-PLC Nano-10 r81 - Denial of Service

No description provided by source. Exploit Title: Tri-PLC Nano-10 DoS Date: 07/11/2013 Exploit Author: Sapling Vendor Homepage: www.tri-plc.com Version: Firmware Version r81 and prior CVE : CVE-2013-2784 ICSA: ICSA-13-189-02 / The vulnerability exists due to a flaw in the PLC's ability to handle ...

Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC

No description provided by source. !/usr/bin/python asmb-heap.py Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC Jeremy Brown 0xjbrown41-gmail-com Jan 2011 A specially crafted length field in a MODBUS packet header can trigger heap corruption. 00408312 | 8B5424 3C MOV EDX,DWO...

IOServer "Root Directory" Trailing Backslash Multiple Vulnerabilities

No description provided by source. ===================================================================== BEGIN Foofus.net Security Advisory: foofus-20120817 BEGIN ===================================================================== Title: IOServer Root Directory Trailing Backslash Web Server Vul...

Galil-RIO Modbus - Denial of Service

No description provided by source. Exploit Title: Galil RIO-47100 Date: 05-01-2013 Exploit Author: Sapling Vendor Homepage: www.galilmc.com Version: Rio Firmware Prior to 1.1d CVE : CVE-2013-0699 ICSA: ICSA-13-116-01 / There are many different ways to crash this PLC but most of them are centraliz...

IOServer越界读取漏洞

Bugtraq ID:66761 CVE ID:CVE-2014-0777 IOServer是运行在Windows上的工业控制软件，包含内置Web服务器以支持XML服务器功能。 OPC Drivers 1.0.20之前版本内的Modbus从站及分站驱动程序在实现上存在越界读漏洞，攻击者通过特制的数据包，利用此漏洞可造成拒绝服务。 0 ioserver ioserver = 1.0.20 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.ioserver.com/...

CVE-2014-0777

The Modbus slave/outstation driver in the OPC Drivers 1.0.20 and earlier in IOServer OPC Server allows remote attackers to cause a denial of service out-of-bounds read and daemon crash via a crafted packet...

Out-of-bounds

The Modbus slave/outstation driver in the OPC Drivers 1.0.20 and earlier in IOServer OPC Server allows remote attackers to cause a denial of service out-of-bounds read and daemon crash via a crafted packet...

CVE-2014-0777

The CVE-2014-0777 issue affects IOServer’s OPC Server (Windows) in the Modbus slave/outstation driver present in OPC Drivers 1.0.20 and earlier. The root cause is an out-of-bounds read in the Modbus driver, which attackers can trigger with a crafted packet to cause denial of service (daemon crash...

CVE-2014-0777 OServer Out of Bounds Read

The Modbus slave/outstation driver in the OPC Drivers 1.0.20 and earlier in IOServer OPC Server allows remote attackers to cause a denial of service out-of-bounds read and daemon crash via a crafted packet...

CVE-2013-0662

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header...