3468 matches found
CVE-2013-0654
CVE-2013-0654 affects GE Intelligent Platforms Proficy HMI/SCADA—CIMPLICITY (Proficy CIMPLICITY 4.01–8.0 and related CIMPLICITY Process Systems). The CimWebServer component (WebView CimWeb) mishandles input; an attacker sending a crafted packet to port 80/TCP could trigger directory traversal or ...
CVE-2013-0654
CimWebServer in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to execute arbitrary commands or cause a denial of service daemon crash via a crafted packet...
CVE-2013-0653
CVE-2013-0653 is a directory traversal vulnerability in GE Intelligent Platforms Proficy CIMPLICITY’s WebView CimWeb substitute.bcl component (versions 4.01–8.0; also affects Proficy Process Systems with CIMPLICITY). The flaw allows remote attackers to read arbitrary files by sending a crafted pa...
Password Cracker Targets Siemens S7 PLCs
Siemens S7 programmable logic controllers, the same PLC family exploited by the Stuxnet malware, are in the crosshairs of a password-cracking tool that is capable of stealing credentials from industrial control systems. PLCs are microprocessors that automate mechanical processes inside factories,...
CVE-2013-0657
CVE-2013-0657 affects Schneider Electric IGSS (Interactive Graphical SCADA System) up to v10, where a stack-based buffer overflow on crafted input to TCP port 12397/12399 can lead to remote arbitrary code execution. The root cause is a buffer overflow in the DC.exe component (port 12397/tcp) trig...
Researchers Highlight Medical Device Security at Annual ICS Conference
Two popular industrial control system ICS researchers this week demonstrated how easily medical devices, including a Philips-branded machine that regularly interacts with x-ray machines and other hospital equipment, can be hacked. At Digital Bond’s annual SCADA Security Scientific Symposium S4...
CVE-2012-4689
Integer overflow in CimWebServer.exe in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to cause a denial of service daemon crash via a malformed HTTP request...
Integer overflow
Integer overflow in CimWebServer.exe in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to cause a denial of service daemon crash via a malformed HTTP request...
CVE-2012-4689
Ge GE Intelligent Platforms Proficy CIMPLICITY CIMPLICITY CIMPLICITY CIMPLICITY built-in Web server CimWebServer.exe is affected by a remote denial-of-service due to an integer overflow when processing malformed HTTP requests. Affected products include CIMPLICITY versions 4.01 through 8.0 and Pro...
Malware Infects Two Power Plants Lacking Basic Security Controls
During the past three months, unnamed malware infected two power plants’ control systems using unprotected USB drives as an attack vector. At both companies, a lack of basic security controls made it much easier for the malicious code to reach critical networks. In one instance, according to a...
Canary Labs Inc Trend Link Insecure ActiveX Control Method
Overview This advisory provides mitigation details for a vulnerability in the Canary Labs, Inc. Trend Link software. Researcher Kuang-Chun Hung of Security Research and Service Institute−Information and Communication Security Technology Center ICST has identified an insecure ActiveX control metho...
Advantech WebAccess HMI/SCADA Software Persistence XSS Vulnerability
Advantech WebAccess HMI/SCADA software version 7.0-2012.12.05 suffers from a persistent cross site scripting vulnerability. Title : Advantech WebAccess HMI/SCADA Software Persistence Cross-Site Scripting Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor :...
Advantech WebAccess HMI/SCADA Cross Site Scripting
Title : Advantech WebAccess HMI/SCADA Software Persistence Cross-Site Scripting Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://webaccess.advantech.com/ Advisory : http://secpod.org/blog/?p=569...
Advantech Webaccess HMISCADA Software - Persistence Cross-Site Scripting
Advantech Webaccess HMISCADA Software - Persistence Cross-Site Scripting Title : Advantech WebAccess HMI/SCADA Software Persistence Cross-Site Scripting Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://webaccess.advantech.com/ Advisory :...
Advantech Webaccess HMI/SCADA Software - Persistence Cross-Site Scripting
Title : Advantech WebAccess HMI/SCADA Software Persistence Cross-Site Scripting Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://webaccess.advantech.com/ Advisory : http://secpod.org/blog/?p=569...
Schneider Modicon SCADA Ladder Logic Upload/Download
A vulnerability has been reported in Schneider Electric Modicon Quantum. The vulnerability is due to the use of unauthenticated administrative function...
Schneider Modicon SCADA Remote START/STOP Command
A vulnerability has been reported in Schneider Electric Modicon Quantum. The vulnerability is due to the use of unauthenticated administrative function...
SCADA Modbus Client Utility Write Single Register
A vulnerability has been reported in Modbus Client Utility. The vulnerability is due to unauthenticated use of the Write Single Register command...
Stuxnet is Back ! Iran reported another cyber attack
Iran claims to have repelled a fresh cyber attack on its industrial units in a southern province. In the last few years, various Iranian industrial, nuclear and government bodies have recently come under growing cyber attacks, widely believed to be designed and staged by the US and Israel. A powe...
Stuxnet is Back ! Iran reported another cyber attack
Iran claims to have repelled a fresh cyber attack on its industrial units in a southern province. In the last few years, various Iranian industrial, nuclear and government bodies have recently come under growing cyber attacks, widely believed to be designed and staged by the US and Israel. A powe...