SQL Injection Vulnerability in Tianxin SCADA System (CNVD-2021-37549)

Founded in 1995, TIANXIN Instrumentation Group Co., Ltd. is a service provider of flow meters and gas application system solutions in China. A SQL injection vulnerability exists in the TIANXIN SCADA system, which can be exploited by attackers to obtain sensitive information from the database...

Denial of Service Vulnerability in SuperE32 L601 RTUs

SuperE32 L601 RTU is an all-in-one RTU from Anchor Technology for SCADA systems. A denial of service vulnerability exists in the SuperE32 L601 RTU, which can be exploited by attackers to cause a denial of service...

The vulnerability of the SCADA system of OIK Dispetchner NT, related to the improper implementation of authentication algorithms, allows attackers to circumvent existing security restrictions through brute-force attacks.

The vulnerability of the SCADA system of OIK Dispatching is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through brute-force attacks...

The vulnerability of the SCADA system of OIK Dispetchner NT, related to deficiencies in the cryptographic algorithms used, allows a intruder to retrieve user data and increase privileges within the system.

The vulnerability of the SCADA system of OIK Dispatching Network is related to deficiencies in the cryptographic algorithms used. Exploiting this vulnerability could allow an intruder to retrieve user data and increase privileges within the system...

The vulnerability of the SCADA system of OIK Dispetchner NT is related to deficiencies in the mechanism for limiting the number of authentication attempts. This allows a violator to circumvent existing security restrictions by using brute-force attacks.

The vulnerability of the SCADA system of OIK Dispatching is related to deficiencies in the mechanism for limiting the number of authentication attempts. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions by using brute-force attacks...

Meet critical infrastructure security compliance requirements with Microsoft 365

Critical infrastructure operators face a hostile cyber threat environment and a complex compliance landscape. Every operator of an industrial control system also operates an IT network to service its productivity needs. A supervisory control and data acquisition SCADA system operator of a power...

CVE-2021-22669

Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA portal of WebAccess/SCADA Versions 9.0.1 and prior, which may allow a low-privileged user to update an administrator’s password and login as an administrator to escalate privileges on the system...

CVE-2021-22669

Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA portal of WebAccess/SCADA Versions 9.0.1 and prior, which may allow a low-privileged user to update an administrator’s password and login as an administrator to escalate privileges on the system...

Default credentials

Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA portal of WebAccess/SCADA Versions 9.0.1 and prior, which may allow a low-privileged user to update an administrator’s password and login as an administrator to escalate privileges on the system...

CVE-2021-22669

CVE-2021-22669 affects Advantech WebAccess/SCADA versions 9.0.1 and earlier. Incorrect default permissions on the Project Management page may allow a low-privileged user to update an administrator’s password and log in as an administrator, enabling privilege escalation. Vendor guidance: update to...

CVE-2021-22669

Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA portal of WebAccess/SCADA Versions 9.0.1 and prior, which may allow a low-privileged user to update an administrator’s password and login as an administrator to escalate privileges on the system...

Beers with Talos Ep. #103: ICS/SCADA Security — The permanence and people problems

Beers with Talos BWT Podcast episode No. 103 is now available. Download this episode and subscribe to Beers with Talos:Apple Podcasts Google PodcastsSpotify StitcherIf iTunes and Google Play aren't your thing, click here. By Mitch Neff. Recorded March 2021 ICS and SCADA... This is only the...

PT-2021-6930 · Elcomplus · Elcomplus Smartptt

Name of the Vulnerable Software and Affected Versions: Elcomplus SmartPTT affected versions not specified Description: The issue is related to authorization errors in the Elcomplus SmartPTT scada-server, allowing a low-authenticated user to access higher-level administration authorization. This c...

Advantech WebAccess/SCADA Critical Resource Permission Assignment Incorrect Vulnerability

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A vulnerability exists in the Project...

The vulnerability of the client-server data processing and technical operations control application Proficy HMI/SCADA CIMPLICITY, due to lack of access control mechanisms, allows attackers to execute arbitrary code or escalate their privileges.

The vulnerability of the client-server data processing and technical operations control application Proficy HMI/SCADA CIMPLICITY is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary code or enhance their privileges...

Advantech WebAccess SCADA 安全漏洞

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A vulnerability exists in the Project...

Advantech WebAccessSCADA

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Advantech Equipment: WebAccess/SCADA Vulnerability: Incorrect Permission Assignment for Critical Resource 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System (IGSS), arises from operations that go beyond the buffer boundaries in memory, allowing attackers to read or write arbitrary files.

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System IGSS, arises from the operation of a command that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker who operates remotely to read or write arbitrary files...

CISA Warns of Security Flaws in GE Power Management Devices

The U.S. Cybersecurity & Infrastructure Security Agency CISA is warning of critical-severity security flaws in GE’s Universal Relay UR family of power management devices. GE’s UR devices are the “basis of simplified power management for the protection of critical assets,” according to the company...

SQL Injection Vulnerability in Tianxin SCADA System of Tianxin Instrumentation Group Limited (CNVD-2021-24454)

TIANXIN Instrumentation Group Limited is a professional service provider of flow meters and gas application system solutions in China. A SQL injection vulnerability exists in the TIANXIN SCADA system of TIANXIN Instrumentation Group Limited. An attacker can exploit the vulnerability to obtain...