KingView-Scada

Stack-Based buffer overflow in KingView 6.5.3 SCADA HMI allow remote attackers to cause a DoS or execute arbitrary code via a long filename in a read or write request. The vulnerability is caused due to a boundary error in the handling of filenames and can be exploited to cause a stack-based buff...

SCADA DNP3 Unsolicited Server Response Flooding

A vulnerability exists in DNP3 protocol An attacker can use this exploit to perform unauthorized actions There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

SCADA DNP3 Server Response Flooding

A vulnerability exists in DNP3 protocol An attacker can use this exploit to perform unauthorized actions There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

First Ever Joint EU-US Cyber War Game Starts

Despite extreme upheaval and rampant infighting caused by the European debt crisis, the EU and U.S. are banding together today in Brussels and shifting its focus toward cyber security. The European Network and Information Security Agency ENISA and the U.S. Department of Homeland Security will be...

CoDeSyS-SCADA-Server

CoDeSyS SCADA Exploit. Vulnerability occurs while parsing long HTTP requests in webserver. import string, sys import socket, httplib import telnetlib Target = sys.argv1 Port = intsys.argv2 ShellcodeType = sys.argv3 def howtousage: print "Sorry, required arguments: Host Port" sys.exit-1 def run:...

BroadWin Webaccess SCADAHMI Client - Remote Code Execution

BroadWin Webaccess SCADAHMI Client - Remote Code Execution BroadWin WebAccess SCADA/HMI Remote Code Execution Vulnerability 0day WebAccess is the first fully web browser-based software package for human-machine interfaces HMI, and supervisory control and data acquisition SCADA. bwocxrun.ocx Activ...

BroadWin Webaccess SCADA/HMI Client - Remote Code Execution

BroadWin WebAccess SCADA/HMI Remote Code Execution Vulnerability 0day WebAccess is the first fully web browser-based software package for human-machine interfaces HMI, and supervisory control and data acquisition SCADA. bwocxrun.ocx ActiveX component is prone to a remote code execution...

BroadWin WebAccess SCADA/HMI Client Remote Code Execution

Exploit for windows platform in category remote exploits BroadWin WebAccess SCADA/HMI Remote Code Execution Vulnerability 0day WebAccess is the first fully web browser-based software package for human-machine interfaces HMI, and supervisory control and data acquisition SCADA. bwocxrun.ocx ActiveX...

BroadWin WebAccess SCADA / HMI Code Execution

BroadWin WebAccess SCADA/HMI Client Remote Code Execution Vulnerability 0day WebAccess is the first fully web browser-based software package for human-machine interfaces HMI, and supervisory control and data acquisition SCADA. bwocxrun.ocx ActiveX component is prone to a remote code execution...

Sielco Sistemi WinLog Stack Overflow

Overview Independent researcher Luigi Auriemma reported a stack overflow vulnerability in Version 2.07.00 of the Sielco Sistemi WinLog Lite and Winlog Pro HMI software. Sielco Sistemi has developed an update Version 2.07.01 to address this vulnerability. The researcher has verified that the updat...

PROMOTIC SCADA/HMI Webserver Directory Traversal Vulnerability

The host is running PROMOTIC SCADA/HMI Webserver and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbpromoticscadahmiserverdirtravvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ PROMOTIC SCADA/HMI Webserver Directory Traversal Vulnerability Authors: Veerendra G.G...

PROMOTIC SCADA/HMI Webserver Directory Traversal Vulnerability

PROMOTIC SCADA/HMI Webserver is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsys PROMOTIC 8.1.4 - ActiveX GetPromoticSite Unitialized Pointer

Microsys PROMOTIC 8.1.4 - ActiveX GetPromoticSite Unitialized Pointer Luigi Auriemma Application: Microsys PROMOTIC http://www.promotic.eu/en/promotic/scada-pm.htm Versions: 8.1.4 Platforms: Windows Bug: ActiveX GetPromoticSite unitialized pointer Exploitation: remote Date: 30 Oct 2011 Author:...

Microsys PROMOTIC 8.1.4 - ActiveX GetPromoticSite Unitialized Pointer

Luigi Auriemma Application: Microsys PROMOTIC http://www.promotic.eu/en/promotic/scada-pm.htm Versions: 8.1.4 Platforms: Windows Bug: ActiveX GetPromoticSite unitialized pointer Exploitation: remote Date: 30 Oct 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introducti...

IRAI AUTOMGEN 8.0.0.7 - Use-After-Free

Luigi Auriemma Application: IRAI AUTOMGEN http://www.irai.com/a8e/ Versions: = 8.0.0.7 aka 8.022 Platforms: Windows Bug: use after free Exploitation: file Date: 10 Oct 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix =============== 1...

Vulnerabilities in PcVue 10 (SCADA)

Luigi Auriemma Application: PcVue http://www.arcinfo.com/index.php?option=comcontent&id=2&Itemid=151 Versions: PcVue = 10.0 SVUIGrd.ocx = 1.5.1.0 aipgctl.ocx = 1.07.3702 Platforms: Windows Bugs: A code execution in SVUIGrd.ocx Save/LoadObject B write4 in SVUIGrd.ocx GetExtendedColor C possible...

Sunway ForceControl SNMP NetDBServer Signed Integer Buffer Overflow

Added: 09/29/2011 BID: 49747 OSVDB: 75798 Background Sunway ForceControl is a Chinese SCADA/HMI software application widely used in China to help run weapons systems, utilities and chemical plants. It is also used to a lesser extent in other countries, including the US. SNMP NetDBServer is one of...

Sunway ForceControl SNMP NetDBServer Signed Integer Buffer Overflow

Added: 09/29/2011 BID: 49747 OSVDB: 75798 Background Sunway ForceControl is a Chinese SCADA/HMI software application widely used in China to help run weapons systems, utilities and chemical plants. It is also used to a lesser extent in other countries, including the US. SNMP NetDBServer is one of...

PcVue 10.0 - Multiple Vulnerabilities

PcVue 10.0 - Multiple Vulnerabilities Luigi Auriemma Application: PcVue http://www.arcinfo.com/index.php?option=comcontent&id=2&Itemid=151 Versions: PcVue = 10.0 SVUIGrd.ocx = 1.5.1.0 aipgctl.ocx = 1.07.3702 Platforms: Windows Bugs: A code execution in SVUIGrd.ocx Save/LoadObject B write4 in...

PcVue 10.0 - Multiple Vulnerabilities

Luigi Auriemma Application: PcVue http://www.arcinfo.com/index.php?option=comcontent&id=2&Itemid=151 Versions: PcVue = 10.0 SVUIGrd.ocx = 1.5.1.0 aipgctl.ocx = 1.07.3702 Platforms: Windows Bugs: A code execution in SVUIGrd.ocx Save/LoadObject B write4 in SVUIGrd.ocx GetExtendedColor C possible...