Rockwell FactoryTalk View SE SCADA Unauthenticated Remote Code Execution

This module exploits a series of vulnerabilities to achieve unauthenticated remote code execution on the Rockwell FactoryTalk View SE SCADA product as the IIS user. The attack relies on the chaining of five separate vulnerabilities. The first vulnerability is an unauthenticated project copy...

Advantech WebAccess SCADA Arbitrary File Deletion

An arbitrary file deletion vulnerability exists in Advantech WebAccess. The vulnerability is due to insufficient validation on user supplied paths before using them in file operations within BwPSLink.exe...

Snake Ransomware Delivers Double-Strike on Honda, Energy Co.

The Snake ransomware has reportedly hit two high-profile companies this week: Honda and a South American energy-distribution company called Enel Argentina. In a tweet on Monday, the Honda Automobile Customer Service said it was “experiencing technical difficulties and are unavailable.” And later,...

CVE-2020-12004

The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway versions prior to 8.0.10 and Ignition 7 Gateway versions prior to 7.9.14, allowing an attacker to obtain sensitive information. Recent assessments: cdelafuente-r7 at June 26, 2020 11:13am UTC...

CVE-2020-10644

The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway versions prior to 8.0.10 and Ignition 7 Gateway versions prior to 7.9.14, allowing an attacker to obtain sensitive information. Recent assessments:...

Introduction to PLCs and Ladder Logic

Introduction We do a lot of client work with ICS, IIoT, and SCADA. We've been to various power plants, factories, electricity substations and they all use the same technology in the form of a PLC. A PLC is a Programmable Logic Controller. PLCs are what keep our Critical National Infrastructure...

Inductive Automation Ignition Code Issue Vulnerability (CNVD-2020-34643)

Inductive Automation Ignition is a suite of integrated software platforms for SCADA systems from Inductive Automation, Inc. The platform supports SCADA data acquisition and monitoring systems, HMI human machine interface and more. A code issue vulnerability exists in Inductive Automation Ignition...

Emerson OpenEnterprise

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Emerson Equipment: OpenEnterprise SCADA Software Vulnerabilities: Missing Authentication for Critical Function, Improper Ownership Management, Inadequate Encryption Strength 2. RISK EVALUATION...

Advantech WebAccessNode suffers from an arbitrary path file deletion vulnerability (CNVD-2020-30159)

Advantech WebAccessNode is a fully Internet Explorer-based HMI/SCADA monitoring software. Advantech WebAccessNode has an arbitrary path file deletion vulnerability that can be exploited by an attacker to delete arbitrary path files on the system...

SQL Injection Vulnerability in Haiwell's Cloud SCADA Cloud Configuration Software

Haiwell Haiwell cloud configuration software Cloud SCADA is an industrial automation monitoring and management platform software developed by Xiamen Haiwell Technology Co. A SQL injection vulnerability exists in Haiwell Cloud SCADA, which can be exploited by an attacker to obtain sensitive...

Command Execution Vulnerability in Haiwell's Cloud Configuration Software Cloud SCADA

Haiwell Haiwell cloud configuration software Cloud SCADA is an industrial automation monitoring and management platform software developed by Xiamen Haiwell Technology Co. A command execution vulnerability exists in Haiwell Cloud SCADA, which can be exploited by an attacker to gain server...

Code Execution Vulnerability in Haiwell's Cloud Configuration Software Cloud SCADA

Haiwell Haiwell cloud configuration software Cloud SCADA is an industrial automation monitoring and management platform software developed by Xiamen Haiwell Technology Co. A code execution vulnerability exists in Haiwell Cloud SCADA, which can be exploited by an attacker to execute arbitrary code...

Arbitrary File Deletion Vulnerability in Haiwell's Cloud Configuration Software Cloud SCADA

Haiwell Haiwell cloud configuration software Cloud SCADA is an industrial automation monitoring and management platform software developed by Xiamen Haiwell Technology Co. Haiwell Haiwei Cloud SCADA configuration software Cloud SCADA arbitrary file deletion vulnerability, an attacker can exploit...

Arbitrary File Download Vulnerability in Haiwell SCADA

Haiwei Cloud Configuration Software is an industrial automation monitoring and management platform software developed by Xiamen Haiwei Technology Co. An arbitrary file download vulnerability exists in Haiwell SCADA, which can be exploited by attackers to obtain sensitive information about the...

Hardcoded Credential Authorization Bypass Vulnerability in Haiwell SCADA

Haiwei Cloud Configuration Software is an industrial automation monitoring and management platform software developed by Xiamen Haiwei Technology Co. A hard-coded credential authorization bypass vulnerability exists in Haiwell SCADA, which can be exploited by an attacker to obtain sensitive...

Haiwell SCADA suffers from information leakage vulnerability

Haiwei Cloud Configuration Software is an industrial automation monitoring and management platform software developed by Xiamen Haiwei Technology Co. An information disclosure vulnerability exists in Haiwell SCADA, which can be exploited by attackers to obtain sensitive information about the...

Advantech WebAccess/SCADA DrawSrv IOCTL 0x00002723 Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/SCADA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of IOCTL 0x00002723 in DrawSrv.dll. The issue results from...

Advantech WebAccess/SCADA DATACORE IOCTL 0x0000521e Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/SCADA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of IOCTL 0x0000521e in DATACORE.exe. The issue results from...

Advantech WebAccess/SCADA ViewSrv IOCTL 0x00002722 Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/SCADA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of IOCTL 0x00002722 in ViewSrv.dll. The issue resul...

Advantech WebAccess/SCADA DATACORE IOCTL 0x5217 Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/SCADA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x5217 in datacore.exe. The issue results from the lac...