NETXEIB OPC Server句柄验证远程代码执行漏洞

OPC服务器是工业制造领域中自动化和控制系统所广泛使用的数据访问控制工具。 NETxAUTOMATION所提供的OPC服务器（NETXEIB OPC Server）在实现以下OPC数据访问接口方式时存在多个安全漏洞： IOPCSyncIO::Read IOPCSyncIO::Write IOPCServer::AddGroup IOPCServer::RemoveGroup IOPCCommon::SetClientName IOPCGroupStateMgt::CloneGroup 如果提供了特制的OPC句柄的话攻击者就可以强制服务器读写访问任意内存，导致在OPC服务器上执行任意指令。...

Multiple OPC Servers multiple security vulnerabilities

Multiple memory corruptions...

[NB07-22] Multiple vulnerabilities in NETxEIB OPC server

Multiple vulnerabilities in NETxEIB OPC server ============================================== OPC servers provide a standard way to interoperate automation and control systems, bridging data from several industrial protocols such as DNP3, MODBUS, etc. to a more standard data access interface. The...

[NB07-17] Multiple vulnerabilities in Takebishi Electric DeviceXplorer SYSMAC OPC server

Multiple vulnerabilities in Takebishi Electric DeviceXplorer SYSMAC OPC server ============================================================================ == OPC servers provide a standard way to interoperate automation and control systems, bridging data from several industrial protocols such as...

[NB07-07] Multiple vulnerabilities in Takebishi Electric DeviceXplorer HIDIC OPC server

Multiple vulnerabilities in Takebishi Electric DeviceXplorer HIDIC OPC server ============================================================================ = OPC servers provide a standard way to interoperate automation and control systems, bridging data from several industrial protocols such as...

[NB07-10] Multiple vulnerabilities in Takebishi Electric DeviceXplorer MODBUS OPC server

Multiple vulnerabilities in Takebishi Electric DeviceXplorer MODBUS OPC server ============================================================================ == OPC servers provide a standard way to interoperate automation and control systems, bridging data from several industrial protocols such as...

[NB07-09] Multiple vulnerabilities in Takebishi Electric DeviceXplorer FA-M3 OPC server

Multiple vulnerabilities in Takebishi Electric DeviceXplorer FA-M3 OPC server ============================================================================ = OPC servers provide a standard way to interoperate automation and control systems, bridging data from several industrial protocols such as...

[NB07-08] Multiple vulnerabilities in Takebishi Electric DeviceXplorer MELSEC OPC server

Multiple vulnerabilities in Takebishi Electric DeviceXplorer MELSEC OPC server ============================================================================ == OPC servers provide a standard way to interoperate automation and control systems, bridging data from several industrial protocols such as...

Takebishi Electric DeviceXPlorer OPC Server Multiple Vulnerabilities

Binary data scadadevicexploreropccodeexec.nbin...

DeviceXPlorer OPC Server错误句柄验证漏洞

DeviceXPlorer OPC Server可为各种日本电机系列提供软件接口，与作为OPC客户的应用程序相互通信。 DeviceXplorer OPC Server没有正确地验证服务器句柄，将句柄用作了客户端调用的输入参数，这允许攻击者通过特定的函数调用导致服务器崩溃或执行任意指令。 以下是有漏洞的函数： IOPCItemMgt::SetActiveState IOPCItemMgt::SetClientHandles IOPCItemMgt::SetDataTypes IOPCSyncIO::Read IOPCSyncIO::Write IOPCAsyncIO::Read...

CVE-2007-1313

NETxAutomation NETxEIB OPC Server before 3.0.1300 does not properly validate OLE for Process Control OPC server handles, which allows attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors involving the 1 IOPCSyncIO::Read, 2 IOPCSyncIO::Write, 3...

Code injection

NETxAutomation NETxEIB OPC Server before 3.0.1300 does not properly validate OLE for Process Control OPC server handles, which allows attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors involving the 1 IOPCSyncIO::Read, 2 IOPCSyncIO::Write, 3...

CVE-2007-1313

NETxAutomation NETxEIB OPC Server before 3.0.1300 does not properly validate OLE for Process Control OPC server handles, which allows attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors involving the 1 IOPCSyncIO::Read, 2 IOPCSyncIO::Write, 3...

CVE-2007-1313

Affected product: NETxAutomation NETxEIB OPC Server (3.0) on Windows XP. Vulnerability: improper validation of OPC server handles allows a remote attacker to access arbitrary server memory via (1) IOPCSyncIO::Read, (2) IOPCSyncIO::Write, (3) IOPCServer::AddGroup, (4) IOPCServer::RemoveGroup, (5) ...

Takebishi Electric DeviceXPlorer OPC服务器远程代码执行漏洞

OPC OLE for Process Control 是一款为保证工业软件和设备的互联性而制订的程序接口国际标准。 Takebishi Electric DeviceXPlorer OPC服务器存在设计错误，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 通过OPCDA接口，可导致在OPC Server上访问任意内存，可导致执行任意指令。如下版本的DeviceXPlorer OPC Server受此漏洞影响： DeviceXPlorer MELSEC OPC Server DeviceXPlorer SYSMAC OPC Server DeviceXPlorer FA-M3 O...

NETxAutomation NETxEIB OPC Server fails to properly validate OPC server handles

Overview The NETxAutomation NETxEIB OPC Server contains a vulnerability that may allow a remote attacker to execute arbitary code or cause a denial-of-service. Description OLE for Process Control OPC is a specification for a standard set of OLE COM objects for use in the process control and...

Code injection

Unspecified vulnerability in the IOPCServer::RemoveGroup function in the OPCDA interface in Takebishi Electric DeviceXPlorer OLE for Process Control OPC Server before 3.12 Build3 allows remote attackers to execute arbitrary code via unspecified vectors involving access to arbitrary memory. NOTE:...

CVE-2007-1319

Unspecified vulnerability in the IOPCServer::RemoveGroup function in the OPCDA interface in Takebishi Electric DeviceXPlorer OLE for Process Control OPC Server before 3.12 Build3 allows remote attackers to execute arbitrary code via unspecified vectors involving access to arbitrary memory. NOTE:...

CVE-2007-1319

The CVE refers to an arbitrary code execution vulnerability in the Takebishi DeviceXPlorer OPC Server family (HIDIC, SYSMAC, MELSEC, FA-M3, MODBUS) via the OPC DA interface. The issue stems from the server implementation of the IOPCServer::RemoveGroup method, which can access arbitrary memory and...

Takebishi Electric DeviceXPlorer OPC Server fails to properly validate OPC server handles

Overview The Takebishi Electric DeviceXPlorer OPC server contains a vulnerability that may allow a remote attacker to execute arbitary code or cause a denial-of-service. Description OLE for Process Control OPC is a specification for a standard set of OLE COM objects for use in the process control...