Stack overflow

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header...

Schneider Electric产品基于栈的缓冲区溢出漏洞

Bugtraq ID:66500 CVE ID:CVE-2013-0662 施耐德电气为100多个国家的能源及基础设施、工业、数据中心及网络、楼宇和住宅市场提供整体解决方案。 Schneider Electric多个产品使用的Modbus Serial驱动监听TCP 27700端口，当处理连接时，Modbus应用头字段会最先读入缓冲区，当在头字段指定超大缓冲区大小时可触发基于栈的缓冲区溢出，成功利用漏洞可以以应用程序上下文执行任意代码。 0 Schneider Electric TwidoSuite Versions 2.31.04 Schneider Electric PowerSui...

CVE-2013-0662

The CVE-2013-0662 vulnerability affects Schneider Electric’s Modbus Serial Driver (ModbusDrv.exe) used by multiple Schneider Electric products. A stack-based buffer overflow is triggered when a large value is specified in the Modbus Application Header, enabling remote code execution with the user...

CVE-2013-0662

Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header...

Patch Available for Schneider Electric Serial Modbus Driver

Schneider Electric, a leading provider of industrial control systems, recently patched a remotely exploitable vulnerability in a driver found in 11 of its products. The Industrial Control Systems Computer Emergency Response Team ICS-CERT released an advisory yesterday alerting users to the...

MODBUS/TCP 'Return Query Data' Function Code Detection

Binary data 7099.pasl...

MODBUS/TCP 'Force Listen Mode' Function Code Detection

Binary data 7101.pasl...

MODBUS/TCP 'Restart Communications' Function Code Detection

Binary data 7100.pasl...

Modicon Modbus/TCP Programming Function Code Access (SCADA) (deprecated)

Binary data 3852.prm...

MODBUS/TCP 'Report Server ID' Function Code Detection

Binary data 7103.pasl...

MODBUS Server Diagnostic Mode (SCADA) (deprecated)

Binary data 3849.prm...

MODBUS/TCP 'Clear Counters and Diagnostic Register' Function Code Detection

Binary data 7102.pasl...

MODBUS/TCP 'Device Identification' Function Code Detection

Binary data 7105.pasl...

MODBUS/TCP 'CANopen' Function Code Detection

Binary data 7104.pasl...

MODBUS/TCP Client Detection

Binary data 7091.pasl...

MODBUS/TCP Server Detection

Binary data 7092.pasl...

CVE-2013-5741

Triangle Research International aka Tri Nano-10 PLC devices with firmware r81 and earlier do not properly handle large length values in MODBUS data, which allows remote attackers to cause a denial of service transition to the interrupt state via a crafted packet to TCP port 502...

Code injection

Triangle Research International aka Tri Nano-10 PLC devices with firmware r81 and earlier do not properly handle large length values in MODBUS data, which allows remote attackers to cause a denial of service transition to the interrupt state via a crafted packet to TCP port 502...

CVE-2013-5741

Triangle Research International aka Tri Nano-10 PLC devices with firmware r81 and earlier do not properly handle large length values in MODBUS data, which allows remote attackers to cause a denial of service transition to the interrupt state via a crafted packet to TCP port 502...

CVE-2013-5741

The CVE-2013-5741 issue affects Triangle Research International Nano-10 PLC devices (firmware prior to r82). It stems from improper input validation in Modbus/TCP handling, allowing remote attackers to cause a DoS by sending crafted packets to TCP port 502, potentially making the device inaccessi...