1316 matches found
OPC UA Server Detection (SCADA)
Binary data 700142.prm...
Siemens devices using the PROFINET Discovery and Configuration Protocol (Update E)
CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...
Siemens devices using the PROFINET Discovery and Configuration Protocol (Update H)
CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...
Moxa MX AOPC-Server XML External Entity Injection Vulnerability
The Moxa MX-AOPC UA Kit is an OPC UA server for industrial automation that supports push-pull communication. An XML external entity injection vulnerability exists in the Moxa MX AOPC-Server. The vulnerability is due to remote file disclosure due to ".AOP" files used through the MX-AOPC Server...
Moxa MX AOPC-Server 1.5 - XML External Entity Injection
Moxa MX AOPC-Server 1.5 - XML External Entity Injection + Credits: John Page AKA HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MOXA-MX-AOPC-SERVER-v1.5-XML-EXTERNAL-ENTITY.txt + ISR: ApparitionSec Vendor: ============ www.moxa.com Product:...
Moxa MX AOPC-Server 1.5 - XML External Entity Injection
Credits: John Page AKA HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MOXA-MX-AOPC-SERVER-v1.5-XML-EXTERNAL-ENTITY.txt + ISR: ApparitionSec Vendor: ============ www.moxa.com Product: ======================= MX-AOPC UA SERVER - 1.5 Moxa's MX-AOPC...
OPC UA Detection (TCP)
TCP based detection of services supporting the OPC Unified Architecture OPC UA protocol. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2016-5793
Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory...
CVE-2016-5793
Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory...
Design/Logic Flaw
Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory...
CVE-2016-5793
Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory...
CVE-2016-5793
CVE-2016-5793 describes an unquoted Windows search/path vulnerability in Moxa Active OPC Server prior to 2.4.19 that allows local privilege escalation by placing a Trojan horse executable in the system drive. The root cause is an unquoted service path; exploitation is local, requires credentials,...
Siemens SIMATIC NET PCSoftware Denial of Service Vulnerability
SIMATIC NET is an open and multifaceted communication system provided by Siemens at the industrial control level. A denial of service vulnerability exists in Siemens SIMATIC NET PCSoftware. An attacker can exploit the vulnerability by sending specially crafted packets to ports...
CVE-2016-5874
Siemens SIMATIC NET PC-Software before 13 SP2 allows remote attackers to cause a denial of service OPC UA service outage via crafted TCP packets...
Code injection
Siemens SIMATIC NET PC-Software before 13 SP2 allows remote attackers to cause a denial of service OPC UA service outage via crafted TCP packets...
CVE-2016-5874
The vulnerability CVE-2016-5874 affects Siemens SIMATIC NET PC-Software prior to version 13 SP2. The underlying issue is a denial-of-service condition caused by specially crafted TCP packets sent to specific OPC-UA-related ports (55101–55105, 4845, 4847–4850). Successful exploitation can cause an...
Moxa Active OPC Server Unquoted Service Path Escalation Vulnerability
OVERVIEW Independent researcher Zhou Yu has identified an unquoted service path escalation vulnerability in Moxa’s Active OPC Server application. Moxa has produced a new version to mitigate this vulnerability. Zhou Yu has tested the new version to validate that it resolves the vulnerability...
Cogent DataHub < 6.4.5Beta OPC Connection Failure DoS
Binary data scadacogentdatahub645beta.nbin...