Metasploit Holding On Siemens Exploits

UPDATE: A week after a security researcher decided to cancel a technical discussion of security holes in industrial control software from Siemens, Inc., public exploits for the vulnerabilities are on hold while the company works to shore up systems running its Simatic programmable logic controlle...

SCADA Holes Allowed Remote Takedown of Siemens Systems

Security researcher Dillon Beresford decided not to present a talk at the TakedownCon in Dallas on Thursday, citing concerns about mayhem that could have resulted. But in an e-mail, he told Threatpost that the vulnerabilities could allow remote attackers to start or stop Siemens Programmable Logi...

7-Technologies IGSS < 9.0.0.11129 Multiple DoS Vulnerabilities

Binary data scadaigss90011129.nbin...

Serious SCADA Security Flaw Affects Critical Infrastructure Firms

The U.S.’s Computer Emergency Response Team CERT issued a warning to critical infrastructure firms on Wednesday about a serious security hole in products from Massachusetts firm Iconics that could leave critical systems vulnerable to remote attacks. U.S. companies in the electricity, oil and gas,...

Scadatec Limited Procyon Telnet Buffer Overflow

Overview ICS-CERT originally released Advisory ICSA-11-216-01P on the US-CERT Portal on August 04, 2011. This web page release was delayed to allow users sufficient time to download and install the update. ICS-CERT has received a report from Knud Højgaard of the nSense Vulnerability Coordination...

ICONICS WebHMI ActiveX Stack Overflow

Exploit for windows platform in category remote exploits , , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. ICONICS WebHMI ActiveX Stack Overflow Vendor Link: http://www.iconics.com/ PDF:...

RealFlex RealWin Tag Manipulation Buffer Overflow (CVE-2011-1563)

RealWin is a SCADA Supervisory Control And Data Acquisition server product developed by RealFlex Technologies. SCADA is an industrial control system, in which a computer system monitors and controls an industrial, infrastructure or facility based process. A buffer overflow vulnerability has been...

Modbus/TCP Master OPC Server MODBUS Protocol Response Packet Remote Overflow

Binary data scadaasmbtcpopc302.nbin...

U.S. federal lab linked to Stuxnet breached !

A federally funded U.S. lab that is suspected to have been involved in finding the vulnerabilities in Siemens SCADA systems used by the Stuxnet worm has shut down the Internet connection for its employees following the discovery of a breach into the facility's systems. The Oak Ridge National...

Database of China Foreign Affairs Experts Left Wide Open

A U.S. security expert has uncovered data on more than 10,000 job applicants for positions with China’s State Administration of Foreign Experts Affairs, including user names and passwords that could be used to gain access to other sensitive government systems. The discovery by Dillon Beresford, a...

50 new Scada threats discovered, Another stuxnet in making ?

Scada systems are found in a variety of industrial plants ranging from water and waste treatment to food and pharmaceuticals and even nuclear power plants.Their scurity of these systems is getting worse and is big concern today. Application security management firm Idappcom reported 52 new threat...

Gesytec ElonFmt ActiveX 1.1.14 (ElonFmt.ocx) pid Item Buffer Overflow

Exploit for windows platform in category remote exploits !exchain 0013e7ec: ntdll!ExecuteHandler2+3a 7c9032bc 0013ecf0: cccccccc Invalid exception stack at bbbbbbbb 0:000 u 0013ecf0 0013ecf0 bbbbbbbbcc mov ebx,0CCBBBBBBh 0013ecf5 cc int 3 0013ecf6 cc...

Insecure Mail Server Offers Chinese Government Accounts To The Masses

A security researcher who identified holes in SCADA software used by utilities in China has issued a new warning to that country’s CERT about insecure Web infrastructure, including an e-mail server that allows any Web user to create their own Chinese government mail account. Dillon Beresford, a...

Siemens Assisted with Stuxnet's Development, claimed by Iran !

Siemens Assisted with Stuxnet's Development, claimed by Iran ! A senior Iranian official accuses Siemens of willingly assisting the Stuxnet creators by providing the source code necessary for them to exploit its software. Iran's state news agency, the Islamic Republic News Service IRNA, quotes...

DATAC RealWin SCADA Server TAG function stack overflow

Added: 04/20/2011 CVE: CVE-2011-1563 BID: 46937 Background RealWin is a Supervisory Control and Data Acquisition SCADA server which is distributed by DATAC. Problem A buffer overflow vulnerability in RealWin Server allows remote attackers to execute arbitrary commands by sending a long, specially...

DATAC RealWin SCADA Server TAG function stack overflow

Added: 04/20/2011 CVE: CVE-2011-1563 BID: 46937 Background RealWin is a Supervisory Control and Data Acquisition SCADA server which is distributed by DATAC. Problem A buffer overflow vulnerability in RealWin Server allows remote attackers to execute arbitrary commands by sending a long, specially...

DATAC RealWin SCADA Server TAG function stack overflow

Added: 04/20/2011 CVE: CVE-2011-1563 BID: 46937 Background RealWin is a Supervisory Control and Data Acquisition SCADA server which is distributed by DATAC. Problem A buffer overflow vulnerability in RealWin Server allows remote attackers to execute arbitrary commands by sending a long, specially...

DATAC RealWin SCADA Server TAG function stack overflow

Added: 04/20/2011 CVE: CVE-2011-1563 BID: 46937 Background RealWin is a Supervisory Control and Data Acquisition SCADA server which is distributed by DATAC. Problem A buffer overflow vulnerability in RealWin Server allows remote attackers to execute arbitrary commands by sending a long, specially...

Hackito Ergo Sum 2011 slides available for Download !

Hackito Ergo Sum 2011 slides available for Download ! HES aims at anticipating the challenges of the security world and gathers together underground or amateur security researchers together with professional security expert researchers and technical decision makers. During three days, HES will...

7-Technologies Interactive Graphical SCADA System Remote Code Execution

Added: 04/17/2011 CVE: CVE-2011-1567 BID: 46936 Background 7-Technologies Interactive Graphical SCADA System IGSS is a SCADA solution used mainly in Denmark and the US. Problem 7T IGSS server contains multiple stack overflows, a format string vulnerability, a remote command execution vulnerabilit...