EUVD-2013-2767

Malware in sbrugna...

EUVD-2013-2739

Malware in sbrugna...

EUVD-2013-2748

Malware in sbrugna...

EUVD-2013-2740

Malware in sbrugna...

CVE-2013-2801

The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service instance shutdown and data-collection outage via crafted C37.118 configuration packets that trigger an invalid read operation...

CVE-2013-2800

The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service memory consumption or memory corruption, instance shutdown, and data-collection outage via crafted C37.118 configuration packets...

ICSA-20-315-01_OSIsoft PI Interface for OPC XML-DA

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: OSIsoft Equipment: PI Interface Vulnerability: Numeric Errors 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker-controlled OPC XML-DA Server to respond with a...

CVE-2013-2828

The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows physically proximate attackers to cause a denial of service interface shutdown via crafted input over a serial line...

CVE-2013-2809

The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows remote attackers to cause a denial of service interface shutdown via a crafted TCP packet...

Code injection

The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows remote attackers to cause a denial of service interface shutdown via a crafted TCP packet...

Design/Logic Flaw

The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows physically proximate attackers to cause a denial of service interface shutdown via crafted input over a serial line...

CVE-2013-2809

The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows remote attackers to cause a denial of service interface shutdown via a crafted TCP packet...

CVE-2013-2828

The CVE applies to the OSIsoft PI Interface for DNP3, specifically the DNP Master Driver in the OSIsoft PI Interface, version prior to 3.1.2.54. The root cause is improper input handling/validation that can cause the PI Interface for DNP3 to shut down. Two attack surfaces are described: (1) IP-co...

CVE-2013-2809

CVE-2013-2809 concerns the DNP Master Driver in OSIsoft PI Interface for DNP3 (prior to version 3.1.2.54). The root cause is improper input validation in the DNP3 IP path, allowing remote attackers to cause an interface shutdown/DoS by sending a crafted TCP packet. The vulnerability affects IP-co...

CVE-2013-2801

The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service instance shutdown and data-collection outage via crafted C37.118 configuration packets that trigger an invalid read operation...

Design/Logic Flaw

The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service instance shutdown and data-collection outage via crafted C37.118 configuration packets that trigger an invalid read operation...

CVE-2013-2800

The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service memory consumption or memory corruption, instance shutdown, and data-collection outage via crafted C37.118 configuration packets...

Memory corruption

The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service memory consumption or memory corruption, instance shutdown, and data-collection outage via crafted C37.118 configuration packets...

CVE-2013-2800

The CVE-2013-2800 issue affects the OSIsoft PI Interface for IEEE C37.118 prior to 1.0.6.158. It can allow remote attackers to cause denial of service through memory consumption or memory corruption when processing crafted C37.118 configuration packets, potentially leading to an instance shutdown...

CVE-2013-2801

The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service instance shutdown and data-collection outage via crafted C37.118 configuration packets that trigger an invalid read operation...