PT-2018-38: Information Disclosure in APC Uninterrupted Power Supplies

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in APC Uninterrupted Power Supplies. Vulnerability in Schneider Electric's MGE SNMP/Web Card 66074 installed in MGE UPS and MGE STS, related to the integrated web server Port 80/443/TCP and SSL...

PT-2016-28: Information Disclosure in Siemens SICAM PAS

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Siemens SICAM PAS. Siemens SICAM PAS does not properly restrict password data in the database, which makes it easier for local users to calculate passwords by leveraging unspecified database...

PT-2016-33: Privilege Gaining in Siemens SICAM PAS

The specialists of the Positive Research center have detected a Privilege Gaining vulnerability in Siemens SICAM PAS. SICAM PAS has a factory account with hardcoded passwords, which allows attackers to gain privileged access to the database via TCP port 2638. How to fix Update your software up to...

PT-2016-34: Password Recovery in Siemens SICAM PAS

The specialists of the Positive Research center have detected a Password Recovery vulnerability in Siemens SICAM PAS. Vulnerability in SICAM PAS allows local authenticated users to recover user passwords and access the database. How to fix Update your software up to the latest version Advisory...

PT-2016-29: Information Disclosure in Siemens SICAM PAS

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Siemens SICAM PAS. Siemens SICAM PAS allows local users to obtain sensitive configuration information by leveraging database stoppage. How to fix Please contact the Siemens Energy Customer...

PT-2018-04: Sensitive Information Disclosure in Siemens SIPROTEC 4 and SIPROTEC Compact relays

The specialists of the Positive Research center have detected a Sensitive Information Disclosure vulnerability in Siemens SIPROTEC 4 and SIPROTEC Compact relays. Vulnerability allows unauthenticated remote, low-skilled attackers to upload a modified device configuration overwriting access...

PT-2018-05: Unauthorized Firmware Modification in Siemens EN100 Ethernet modules

The specialists of the Positive Research center have detected an Unauthorized Firmware Modification vulnerability in Siemens EN100 Ethernet modules. Vulnerability allows unauthenticated attackers to upgrade or downgrade the firmware of the affected device including to older versions with known...

PT-2018-03: Control Takeover in Siemens DIGSI 4 and EN100 Ethernet modules

The specialists of the Positive Research center have detected a Control Takeover vulnerability in Siemens DIGSI 4 and EN100 Ethernet modules. Vulnerability allows unauthenticated remote, low-skilled attackers to upload a modified device configuration overwriting access authorization passwords, an...

Siemens SIMATIC STEP 7 TIA Portal Vulnerabilities

OVERVIEW Aleksandr Timorin from Positive Technologies has identified authentication vulnerabilities in the Siemens SIMATIC STEP 7 TIA Portal application. Siemens has produced a service pack that mitigates these vulnerabilities. AFFECTED PRODUCTS The following Siemens products are affected: SIMATI...

[SECURITY] Fedora 21 Update: MUMPS-5.0.1-4.fc21

MUMPS implements a direct solver for large sparse linear systems, with a particular focus on symmetric positive definite matrices. It can operate on distributed matrices e.g. over a cluster. It has Fortran and C interfaces, and can interface with ordering tools such as Scotch...

PT-2015-18: XML External Entity Injection in 1С:Enterprise

The specialists of the Positive Research center have detected an XML External Entity Injection vulnerability in the 1C: Enterprise application. This vulnerability allows an attacker to access the internal network resources, file system, and cause a denial of service attack. All XML parsers are...

PT-2017-52: Information Disclosure in Rockwell Automation Micrologix 1100 and 1400 PLC

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Rockwell Automation Micrologix 1100 and 1400 PLC. Vulnerability in programmable-logic controllers, caused by sending user credentials to the web server using a HTTP GET method, allows attacker...

PT-2016-32: XML External Entity Injection in vCenter Server and vRealize Automation

The specialists of the Positive Research center have detected an XML External Entity Injection in vCenter Server. Vulnerability in the Single Sign-On implementation in VMware vCenter Server and vRealize Automation allows attackers to cause a denial of service or obtain sensitive information via a...

PT-2016-31: XML External Entity Injection in vCenter Server

The specialists of the Positive Research center have detected an XML External Entity Injection in vCenter Server. Vulnerability in the Log Browser, Distributed Switch setup, and Content Library in the vCenter Server allows an authorized user to obtain sensitive information by sending a specially...

PT-2016-30: XML External Entity Injection in vSphere Client

The specialists of the Positive Research center have detected an XML External Entity Injection in vSphere Client. Vulnerability in the vSphere Client allows attackers to obtain sensitive information by tricking a user to connect to a malicious vCenter Server or ESXi. How to fix Update your softwa...

PT-2016-12: HTTP Header Injection in VMware vCenter Server and ESXi

The specialists of the Positive Research center have detected an HTTP Header Injection vulnerability in VMware vCenter Server and ESXi. The application does not properly sanitize user input before using it in HTTP response headers that allows a malicious user to inject arbitrary headers into HTTP...

DEBIAN-CVE-2014-9651

Buffer overflow in CHICKEN 4.9.0.x before 4.9.0.2, 4.9.x before 4.9.1, and before 5.0 allows attackers to have unspecified impact via a positive START argument to the "substring-index-ci procedures."...

CVE-2014-9651

Buffer overflow in CHICKEN 4.9.0.x before 4.9.0.2, 4.9.x before 4.9.1, and before 5.0 allows attackers to have unspecified impact via a positive START argument to the "substring-index-ci procedures."...

PT-2016-41: Information Disclosure in GE Proficy HMI/SCADA iFIX, Proficy HMI/SCADA CIMPLICITY, and Proficy Historian

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in GE Proficy HMI/SCADA iFIX, Proficy HMI/SCADA CIMPLICITY, and Proficy Historian. Vulnerability due to insufficient protection of user credentials allows attackers to obtain user passwords. How ...

PT-2015-17: SQL injection in Rockwell Automation Micrologix 1100 and 1400 PLC

The specialists of the Positive Research center have detected an SQL injection vulnerability in Rockwell Automation Micrologix 1100 and 1400 PLC. SQL injection vulnerability exists on Allen-Bradly MicroLogix 1100 and 1400 due to the improper sanitization of user input, which allows remote...