CVE-2013-2829

MatrikonOPC SCADA DNP3 OPC Server 1.2.2.0 and earlier allows remote attackers to cause a denial of service infinite loop via a malformed DNP3 packet...

Cogent DataHub < 7.3.4 Malformed POST Request Buffer Overflow RCE

Binary data scadacogentdatahub734.nbin...

Cybersecurity Framework for U.S. Critical Infrastructure

Critical infrastructure operators have been delivered a cybersecurity framework by the U.S. government that paints broad strokes as to how to defend IT and SCADA networks in some of the country’s most sensitive industries such as energy, water and financial services. NIST today announced the...

SIEMENS SIMATIC WinCC Open Architecture拒绝服务漏洞

BUGTRAQ ID: 65347 CVECAN ID: CVE-2014-1699 Siemens SIMATIC WinCC 是监测控制和数据采集SCADA及人机界面HMI系统。 SIEMENS SIMATIC WinCC OA 3.12 P002之前版本存在安全漏洞，远程攻击者通过向端口4999发送畸形的HTTP请求，利用此漏洞即可造成拒绝服务（监控服务中断）。 0 Siemens SIMATIC WinCC Open Architecture 3.12 P002 January 厂商补丁： Siemens -------...

TURCK BL20/BL67 Hardcoded Admin Account

Binary data scadaturckftpauth.nbin...

GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY CimWebServer.exe目录遍历漏洞

CVECAN ID: CVE-2014-0751 GE Proficy CIMPLICITY是客户端/服务器业务可视化和控制解决方案。 GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 8.2 SIM 24之前版本中，CimWebServer.exe（即组件WebView）及Proficy Process Systems在实现上存在目录遍历漏洞，远程攻击者通过向TCP端口10212发送特制的消息，利用此漏洞可执行任意代码。 0 ge-ip Proficy CIMPLICITY 8.2 SIM 24 厂商补丁： ge-ip...

CVE-2014-0751

The CIMPLICITY Web-based access component, CimWebServer, does not check the location of shell files being loaded into the system. By modifying the source location, an attacker could send shell code to the CimWebServer which would deploy the nefarious files as part of any SCADA project. This could...

Directory traversal

Directory traversal vulnerability in CimWebServer.exe aka the WebView component in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted message to TCP port 10212, aka...

Directory traversal

Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-16...

CVE-2014-0751 GE Proficy HMI/SCADA Path Traversal

The CIMPLICITY Web-based access component, CimWebServer, does not check the location of shell files being loaded into the system. By modifying the source location, an attacker could send shell code to the CimWebServer which would deploy the nefarious files as part of any SCADA project. This could...

CVE-2014-0750

GE Proficy CIMPLICITY CIMPLICITY CIMPLICITY: A path traversal vulnerability (CVE-2014-0750) in gefebt.exe within the WebView CimWebServer/Proficy CIMPLICITY components allows remote code execution via crafted HTTP requests. Affected products include Proficy HMI/SCADA - CIMPLICITY (versions up to ...

CVE-2014-0750 GE Proficy HMI/SCADA Path Traversal

Directory traversal vulnerability in gefebt.exe in the WebView CimWeb components in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY through 8.2 SIM 24, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary code via a crafted HTTP request, aka ZDI-CAN-16...

CVE-2014-0751

CVE-2014-0751 affects GE Proficy HMI/SCADA CIMPLICITY CimWebServer (CimWebServer) where the CimWebServer does not validate the location of shell files, enabling remote attackers to load shell code and, per disclosures, potentially execute arbitrary code. Public analyses describe path traversal vu...

Certec atvise scada OpenSSL Heartbleed Vulnerability

OVERVIEW Researcher Bob Radvanovsky of Infracritical has notified NCCIC/ICS-CERT that Certec has released new libraries that mitigate the OpenSSL Heartbleed vulnerability in atvise scada. This vulnerability could be exploited remotely. Exploits that target the OpenSSL Heartbleed vulnerability are...

Dennis Fisher and Mike Mimoso Discuss the Target Breach, SCADA Security and the NSA

Dennis Fisher and Mike Mimoso talk about the big security stories of the last couple of weeks, including the developments in the Target data breach, the president’s speech on NSA surveillance reforms and SCADA security woes...

Electric Cybersecurity Regulations Have Serial Problem

A class of SCADA vulnerabilities discussed at a recent conference is getting attention not only for the risks they pose to master control systems at electric utilities, but also for illuminating a dangerous gap in important critical infrastructure regulations. Researchers Adam Crain and Chris...

CVE-2014-0753

Stack-based buffer overflow in the SCADA server in Ecava IntegraXor before 4.1.4390 allows remote attackers to cause a denial of service system crash by triggering access to DLL code located in the IntegraXor directory...

Stack overflow

Stack-based buffer overflow in the SCADA server in Ecava IntegraXor before 4.1.4390 allows remote attackers to cause a denial of service system crash by triggering access to DLL code located in the IntegraXor directory...

CVE-2014-0753

Ecava IntegraXor SCADA server (Ecava IntegraXor) is affected by CVE-2014-0753. The stack-based buffer overflow affects versions prior to 4.1.4390 and can be exploited remotely by triggering access to DLL code in the IntegraXor directory, potentially causing a denial of service (system crash). The...

PT-2014-3816 · Ecava · Integraxor

Name of the Vulnerable Software and Affected Versions: Ecava IntegraXor versions prior to 4.1.4390 Description: The issue is related to a stack-based buffer overflow in the SCADA server, which can be triggered by remote attackers to cause a denial of service, resulting in a system crash. This...