CVE-2012-5048

APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted packet...

CVE-2012-5049

CVE-2012-5049 concerns the Optima PLC APIFTP Server. Public docs describe a denial-of-service vulnerability: a malformed packet can trigger a loop that consumes CPU, potentially crashing the server. The issue is tied to the APIFTP component in Optimalog Optima PLC 1.5.2 and earlier. Related OpenV...

CVE-2012-5048

CVE-2012-5048 affects Optima PLC APIFTP Server in Optima PLC 1.5.2 and earlier, enabling remote denial of service via a crafted packet that triggers a NULL pointer dereference and daemon crash. The OpenVAS entry and ICS-CERT advisory corroborate a DoS impact, with CVSS v2 base score 7.8. Mitigati...

CVE-2012-5049

APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed packet...

CVE-2012-3037

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate...

Code injection

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate...

CVE-2012-3037

The CVE-2012-3037 vul nerability affects Siemens SIMATIC S7-1200 PLCs (2.x) where the private key of the SIMATIC CONTROLLER Certification Authority certificate is not protected in HTTPS storage. This allows remote attackers to forge a certificate and spoof the S7-1200 web server. Affected product...

CVE-2012-3037

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate...

Default configuration

The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL ciphers in the "SurfControl plc\SuperScout Email Filter\SMTP" registry key, which makes it easier for remote attackers to obtain sensitive information by sniffing the network and then...

ABB AC500 PLC Webserver CoDeSys Vulnerability

Overview ICS-CERT has been notified of a buffer overflow vulnerability in the ABB AC500 PLC Webserver application. Successful exploitation of this vulnerability could lead to a denial of service DoS, affecting the availability of the service. This vulnerability is related to ICS-CERT Advisory,...

Siemens Simatic S7-300/400 CPU START/STOP Module

Exploit Title: Siemens Simatic S7 300/400 CPU command module Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-300 PLC CVE : None require 'msf/core' class Metasploit3 'Siemens Simatic S7-300/400 CPU START/STOP Module',...

Siemens Simatic S7-1200 CPU START/STOP Module

Exploit Title: Siemens Simatic S7 1200 CPU command module Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1200 PLC CVE : None require 'msf/core' class Metasploit3 'Siemens Simatic S7-1200 CPU START/STOP Module', 'Description'...

Siemens Simatic S7-1200 - CPU STARTSTOP Module (Metasploit)

Siemens Simatic S7-1200 - CPU STARTSTOP Module Metasploit Exploit Title: Siemens Simatic S7 1200 CPU command module Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1200 PLC CVE : None require 'msf/core' class Metasploit3...

Siemens Simatic S7-1200 - CPU START/STOP Module (Metasploit)

Exploit Title: Siemens Simatic S7 1200 CPU command module Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1200 PLC CVE : None require 'msf/core' class Metasploit3 'Siemens Simatic S7-1200 CPU START/STOP Module', 'Description'...

Siemens Simatic S7-300400 - CPU STARTSTOP Module (Metasploit)

Siemens Simatic S7-300400 - CPU STARTSTOP Module Metasploit Exploit Title: Siemens Simatic S7 300/400 CPU command module Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-300 PLC CVE : None require 'msf/core' class Metasploit3...

Siemens Simatic S7-300 - PLC Remote Memory Viewer (Metasploit)

Exploit Title: Siemens Simatic S7 300 Remote Memory Viewer Backdoor Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1200 PLC CVE : None require 'msf/core' class Metasploit3 'Siemens Simatic S7-300 PLC Remote Memory Viewer',...

Siemens Simatic S7-300/400 - CPU START/STOP Module (Metasploit)

Exploit Title: Siemens Simatic S7 300/400 CPU command module Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-300 PLC CVE : None require 'msf/core' class Metasploit3 'Siemens Simatic S7-300/400 CPU START/STOP Module',...

Siemens Simatic S7-300 PLC Remote Memory Viewer

Exploit for hardware platform in category remote exploits Exploit Title: Siemens Simatic S7 300 Remote Memory Viewer Backdoor Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1200 PLC CVE : None require 'msf/core' class...

Siemens Simatic S7-300/400 CPU START/STOP Module

Exploit for hardware platform in category remote exploits Exploit Title: Siemens Simatic S7 300/400 CPU command module Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-300 PLC CVE : None require 'msf/core' class Metasploit3...

Siemens Simatic S7-1200 CPU START/STOP Module

Exploit for hardware platform in category remote exploits Exploit Title: Siemens Simatic S7 1200 CPU command module Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1200 PLC CVE : None require 'msf/core' class Metasploit3...