3468 matches found
CVE-2014-0779 Schneider Electric StruxureWare SCADA Expert ClearSCADA Improper Restriction of Operations within the Bounds of a Memory Buffer
The PLC driver in ServerMain.exe in the Kepware KepServerEX 4 component in Schneider Electric StruxureWare SCADA Expert ClearSCADA 2010 R2 build 71.4165, 2010 R2.1 build 71.4325, 2010 R3 build 72.4560, 2010 R3.1 build 72.4644, 2013 R1 build 73.4729, 2013 R1.1 build 73.4832, 2013 R1.1a build...
CVE-2014-0779
The CVE-2014-0779 issue affects the Kepware KepServerEX V4 PLC Driver in the ServerMain.exe component of Schneider Electric StruxureWare SCADA Expert ClearSCADA, impacting multiple release/build combos listed in the NVD entry (2010 R2, 2010 R2.1, 2010 R3, 2010 R3.1, 2013 R1, 2013 R1.1, 2013 R1.1a...
COPA-DATA Improper Input Validation
OVERVIEW Automation software company Ing. Punzenberger COPA-DATA GmbH reported an improper input validation vulnerability affecting the DNP3 driver in the zenon SCADA software. The vulnerability was found based on the DNP3 research conducted by Adam Crain of Automatak and Chris Sistrunk of...
Schneider Electric Patches SCADA, ICS Security Vulnerabilities
The Industrial Control Systems Cyber Emergency Response Team ICS-CERT last week issued advisories warning of serious vulnerabilities in Schneider Electric SCADA gear. Schneider Electric is a supplier of energy management control products that are used in a number of critical industries in North...
Triangle MicroWorks Uncontrolled Resource Consumption
OVERVIEW Adam Crain of Automatak and Chris Sistrunk of Mandiant have identified an uncontrolled resource consumption vulnerability in Triangle MicroWorks products and third-party components. Triangle MicroWorks has produced an update that mitigates this vulnerability. This vulnerability could be...
Schneider Electric SCADA多个产品异常处理拒绝服务漏洞
CVE ID:CVE-2013-2824 施耐德电气为100多个国家的能源及基础设施、工业、数据中心及网络、楼宇和住宅市场提供整体解决方案。其中多个产品使用的SESU工具用于更新windows PC系统上的软件。 Schneider Electric多个产品服务器存在拒绝服务攻击，允许远程攻击者利用漏洞发送特制的报文，可使进程停止响应，造成拒绝服务攻击。 0 Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40 Schneider Electric Vijeo Citect 7.20 - 7.30SP1...
CVE-2013-2824
Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to...
Design/Logic Flaw
Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to...
CVE-2013-2824
Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle exceptions, which allows remote attackers to...
CVE-2013-2824
CVE-2013-2824 affects Schneider Electric StruxureWare SCADA Expert Vijeo Citect (v7.40), Vijeo Citect (v7.20–7.30SP1), CitectSCADA (v7.20–7.30SP1), StruxureWare PowerSCADA Expert (v7.30–7.30SR1), and PowerLogic SCADA (v7.20–7.20SR1). The issue is an exception-handling flaw that allows remote atta...
StruxureWare SCADA Expert ClearSCADA Detection
Binary data scadaappclearscadainstalled.nbin...
MODBUS Server Diagnostic Mode (SCADA) (deprecated)
Binary data 3849.prm...
Modicon Modbus/TCP Programming Function Code Access (SCADA) (deprecated)
Binary data 3852.prm...
Mitsubishi Electric Automation MC-WorX 8.x ActiveX Control Remote Code Execution
Binary data scadamitsubishimc-worx8activex.nbin...
StruxureWare SCADA Expert ClearSCADA Unspecified Vulnerability
Binary data scadaclearscadaSEVD2014-024-01.nbin...
Mitsubishi Electric Automation MC-WorX Suite Detection
Binary data scadaappmitsubishimc-worxdetect.nbin...
Iconics GENESIS32 ActiveX控件远程代码执行漏洞
BUGTRAQ ID: 65706 CVECAN ID: CVE-2014-0758 ICONICS GENESIS32是用于商业设施、能源、食品、农业、医疗、水利的Scada产品。 GENESIS32 8.0, 8.02, 8.04, 8.05版本的GenLaunch.htm文件使用的ActiveX控件不安全，远程攻击者通过诱使用户浏览恶意网页，在未经身份验证或权限提升的情况下，即可利用此漏洞执行任意代码。 0 ICONICS GENESIS32 8.x 厂商补丁： ICONICS ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2013-2829
MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed DNP3 packet...