PT-2012-1974

Name of the Vulnerable Software and Affected Versions Open Automation Software OPC Systems.NET versions prior to 5.0 Description The issue allows remote attackers to cause a denial of service via a malformed .NET RPC packet on TCP port 58723. Recommendations For versions prior to 5.0, update to...

CVE-2011-4871: Improper Input Validation

Open Automation Software OPC Systems.NET before 5.0 allows remote attackers to cause a denial of service via a malformed .NET RPC packet on TCP port 58723...

CVE-2012-1801: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in 1 COM and 2 ActiveX controls in ABB WebWare Server, WebWare SDK, Interlink Module, S4 OPC Server, QuickTeach, RobotStudio S4, and RobotStudio Lite allow remote attackers to execute arbitrary code via crafted input data...

PT-2012-3549

Name of the Vulnerable Software and Affected Versions ABB WebWare Server, WebWare SDK, Interlink Module, S4 OPC Server, QuickTeach, RobotStudio S4, and RobotStudio Lite affected versions not specified Description The issue is related to multiple stack-based buffer overflows in COM and ActiveX...

CVE-2012-0245

ABB Robot Communications Runtime (RobNetScanHost.exe) contains a buffer overflow vulnerability that can be triggered by specially crafted Netscan packets on Port 5512/TCP, potentially enabling remote code execution in affected ABB products (Interlink Module, IRC5 OPC Server, PC SDK, PickMaster 3/...

PT-2012-2436

Name of the Vulnerable Software and Affected Versions ABB Robot Communications Runtime versions prior to 5.14.02 ABB Interlink Module versions prior to 5.14.02 IRC5 OPC Server versions prior to 5.14.02 PC SDK versions prior to 5.14.02 PickMaster 3 and 5 versions prior to 5.14.02 RobView 5 version...

CVE-2011-1914

Buffer overflow in the Advantech ADAM OLE for Process Control OPC Server ActiveX control in ADAM OPC Server before 3.01.012, Modbus RTU OPC Server before 3.01.010, and Modbus TCP OPC Server before 3.01.010 allows remote attackers to execute arbitrary code via unspecified vectors...

Buffer overflow

Buffer overflow in the Advantech ADAM OLE for Process Control OPC Server ActiveX control in ADAM OPC Server before 3.01.012, Modbus RTU OPC Server before 3.01.010, and Modbus TCP OPC Server before 3.01.010 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-1914

Buffer overflow in the Advantech ADAM OLE for Process Control OPC Server ActiveX control in ADAM OPC Server before 3.01.012, Modbus RTU OPC Server before 3.01.010, and Modbus TCP OPC Server before 3.01.010 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-1914

CVE-2011-1914 describes a buffer overflow in the Advantech ADAM OPC Server ActiveX control used by multiple ADAM OPC Server products. The vulnerability affects ADAM OPC Server before 3.01.012, Modbus RTU OPC Server before 3.01.010, and Modbus TCP OPC Server before 3.01.010, enabling remote code e...

PT-2012-1536

Name of the Vulnerable Software and Affected Versions Advantech ADAM OPC Server version 3.01.012 and earlier Advantech Modbus RTU OPC Server version 3.01.010 and earlier Advantech Modbus TCP OPC Server version 3.01.010 and earlier Description The issue is related to a buffer overflow in the Activ...

CVE-2011-1914: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Advantech ADAM OLE for Process Control OPC Server ActiveX control in ADAM OPC Server before 3.01.012, Modbus RTU OPC Server before 3.01.010, and Modbus TCP OPC Server before 3.01.010 allows remote attackers to execute arbitrary code via unspecified vectors...

Progea Movicon Memory Corruption Vulnerability

Overview Security researcher Dillon Beresford of IXIAhttp://www.ixiacom.com/, website last accessed May 10, 2012. has identified a memory corruption vulnerability in the Progea Movicon application. This vulnerability can be exploited by a remote attacker; however, no public exploits are currently...

Cogent OPC DataHub and Cascade DataHub < 7.2 XSS and CRLF Vulnerabilities

OPC DataHub or Cascade DataHub is prone to multiple cross-site scripting XSS and CRLF vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Cogent OPC DataHub and Cascade DataHub XSS and CRLF Vulnerabilities

This host is installed with OPC DataHub or Cascade DataHub and is prone to cross site scripting and CRLF vulnerabilities. OpenVAS Vulnerability Test $Id: gbcogentcascadenopcdatahubmultvuln.nasl 6022 2017-04-25 12:51:04Z teissa $ Cogent OPC DataHub and Cascade DataHub XSS and CRLF Vulnerabilities...

CVE-2012-0309

Cross-site scripting XSS vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0310: Improper Control of Generation of Code

CRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2012-0309: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-2485

Name of the Vulnerable Software and Affected Versions Cogent DataHub versions 7.1.2 and earlier Cascade DataHub versions 6.4.20 and earlier OPC DataHub versions 6.4.20 and earlier Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject...

PT-2012-2486

Name of the Vulnerable Software and Affected Versions Cogent DataHub versions 7.1.2 and earlier Cascade DataHub versions 6.4.20 and earlier OPC DataHub versions 6.4.20 and earlier Description The issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting...