3068 matches found
Omron Multiple Product Vulnerabilities
OVERVIEW Air Force Institute of Technology researcher Stephen Dunlap has identified vulnerabilities in Omron Corporation’s CX-Programmer software, CJ2M series programmable logic controller PLC, and CJ2H series PLC. Omron Corporation has produced new versions that mitigate these vulnerabilities. O...
The vulnerability of the microprogrammed software of Siemens Simatic S7-1200 programmable logic controllers allows a intruder to trigger a service failure.
The software of the programmable logic controller Simatic S7-1200 contains a vulnerability. Exploiting this vulnerability by sending specially crafted HTTPS packets to port 443 causes the device to enter an emergency mode before a “cold” reboot can be performed...
烽火（Fiberhome）HG-110 设备目录穿越漏洞
知道创宇安全研究团队 2015 . 03 . 31一.漏洞概要近期，国外安全研究员发布了针对全球 ADSL 设备存在目录穿越漏洞的研究网页链接1，这个漏洞早在 2011 年就被提出了，影响烽火（Fiberhome）HG-110 型号设备网页链接2，本着学习的态度，笔者对该漏洞进行了一番考证，写在这里。a）漏洞描述烽火（Fiberhome）HG-110 型号设备目录穿越漏洞网页链接3，是由于 webproc 文件在处理参数 getpage 传递过来的文件访问时没有合适过滤，导致用户可以利用 ../../ 跳转访问 web 目录之外的系统文件。b）漏洞分析烽火（Fiberhome）HG-11...
Schneider Electric Modicon PLC Vulnerabilities
OVERVIEW This advisory is a follow-up to the alert titled ICS-ALERT-15-224-02 Schneider Electric Modicon M340 PLC Station P34 Module VulnerabilitiesICS-CERT ALERT, https://ics-cert.us-cert.gov/alerts/ICS-ALERT-15-224-02, web site last accessed September 3, 2015. that was published August 12, 2015...
PhoenixContact PLC Remote START/STOP Command
PhoenixContact Programmable Logic Controllers are built upon a variant of ProConOS. Communicating using a proprietary protocol over ports TCP/1962 and TCP/41100 or TCP/20547. It allows a remote user to read out the PLC Type, Firmware and Build number on port TCP/1962. And also to read out the CPU...
Phoenix Contact ILC 150 ETH PLC - Remote Control Script
!/usr/bin/env python ''' Exploit Title: Phoenix Contact ILC 150 ETH PLC Remote Control script Date: 2015-05-19 Exploit Author: Photubias - tijldotdeneutathowestdotbe Vendor Homepage: https://www.phoenixcontact.com/online/portal/us?urile=pxc-oc-itemdetail:pid=2985330 Version: ALL FW VERSIONS Teste...
Phoenix Contact ILC 150 ETH PLC - Remote Control Script
Phoenix Contact ILC 150 ETH PLC - Remote Control Script ! /usr/bin/env python ''' Exploit Title: Phoenix Contact ILC 150 ETH PLC Remote Control script Date: 2015-05-19 Exploit Author: Photubias - tijldotdeneutathowestdotbe Vendor Homepage:...
Phoenix Contact ILC 150 ETH PLC Remote Control
! /usr/bin/env python ''' Exploit Title: Phoenix Contact ILC 150 ETH PLC Remote Control script Date: 2015-05-19 Exploit Author: Photubias - tijldotdeneutathowestdotbe Vendor Homepage: https://www.phoenixcontact.com/online/portal/us?urile=pxc-oc-itemdetail:pid=2985330 Version: ALL FW VERSIONS Test...
N-Tron 702W Hard-Coded SSH and HTTPS Encryption Keys (Update A)
OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-15-160-01 N-Tron 702W Hard-Coded SSH and HTTPS Encryption Keys that was published June 9, 2015, on the NCCIC/ICS-CERT web site. Independent researcher Neil Smith has identified hard-coded SSH and HTTPS encryption...
Details Surface on Stuxnet Patch Bypass
It took 10 hours to find what had eluded others for close to five years. German computer science student Michael Heerklotz spent the Christmas holiday reading Countdown to Zero Day, a narrative on the discovery and impact of Stuxnet, the computer worm considered one of the first cyberweapons, and...
Patched Windows Machines Exposed to Stuxnet LNK Flaw All Along
A five-year-old Microsoft patch for the .LNK vulnerability exploited by Stuxnet failed to properly protect Windows machines, leaving them exposed to exploits since 2010. Microsoft today is expected to release a security bulletin, MS15-020, patching the vulnerability CVE-2015-0096. It is unknown...
Siemens SIMATIC S7-1200 PLC Web Server Detection
Binary data scadasiemenssimatics71200plcwebserverdetect.nbin...
Siemens SIMATIC S7-1200 PLC < 4.1 Open Redirection
Binary data scadasiemenssimatics71200plcopenredirection.nbin...
Siemens Fixes Redirect Vulnerability in SIMATIC PLC
Siemens has patched a web vulnerability in its SIMATIC PLC family of products that could have led unsuspecting users to malicious sites. According to an advisory on the Industrial Control Systems Cyber Emergency Response Team‘s ICS-CERT site Thursday, the bug was an open redirect vulnerability th...
Siemens SIMATIC S7-1200 Improper Input Validation Vulnerabilities
OVERVIEW Siemens has reported two improper input validation vulnerabilities discovered separately by Prof. Dr. Hartmut Pohl of softScheck GmbH and Arne Vidström of Swedish Defence Research Agency FOI in Siemens’ SIMATIC S7-1200 PLC. Siemens has produced a new version that mitigates these...
Multiple Schneider Electric Modicon PLC Modules Directory Traversal
Binary data 7154.pasl...
Schneider Electric Modicon TSX Micro PLC Detection
Binary data 7153.pasl...
Schneider Electric Modicon M340 PLC Detection
Binary data 7150.pasl...