3461 matches found
DATAC RealWin SCADA Server FC_INFOTAG/SET_CONTROL buffer overflow
Added: 10/03/2008 CVE: CVE-2008-4322 BID: 31418 OSVDB: 48606 Background RealWin is a Supervisory Control and Data Acquisition SCADA server which is distributed by DATAC. Problem A buffer overflow vulnerability in RealWin Server allows remote attackers to execute arbitrary commands by sending a...
DATAC RealWin SCADA Server Buffer Overflow
This module exploits a stack buffer overflow in DATAC Control International RealWin SCADA Server 2.0 Build 6.0.10.37. By sending a specially crafted FCINFOTAG/SETCONTROL packet, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download...
DATAC RealWin 2.0 SCADA Software - Remote PreaAuth Exploit
Hi --------------------------------- http://www.dataconline.com/software/realwin.php "RealWin is a SCADA server product which includes a FlexView HMI and runs on current Microsoft Windows platforms 2000 and XP. It can operate on a single PC or multiple PCs connected through a TCP/IP network. It...
RealWin SCADA服务器远程栈溢出漏洞
BUGTRAQ ID: 31418 RealWin是运行在Windows平台上的数据采集与监视控制系统SCADA服务器产品。 如果远程攻击者向RealWin服务器发送了特制的FCINFOTAG/SETCONTROL报文的话，就可以触发栈溢出，导致执行任意代码。RealWin服务器使用专有协议接受来自FlewWin客户端的连接，无需拥有有效凭据便可以利用这个漏洞。 DATAC Control International RealWin SCADA Server 2.0 厂商补丁： DATAC Control International ---------------------------...
ABB PCU400 'x87'远程缓冲区溢出漏洞
BUGTRAQ ID: 31391 CVE ID：CVE-2008-2474 CNCVE ID：CNCVE-20082474 ABB PCU400提供基于SCADA的系统中进行先进有效的数据采集所需的功能和性能。 ABB PCU400处理IEC60870-5-101和IEC60870-5-104通信协议存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 ABB PCU400应用程序作为使用IEC-870-5-104协议的RTUs和SCADA服务器之间的通信网关使用。发送特殊构建的报文到TCP 8087上的X87 WEB接口，可导致攻击者完全访问PCU400服务器。 ABB...
DATAC RealWin SCADA Server 2.0 - Remote Stack Buffer Overflow
DATAC RealWin SCADA Server 2.0 - Remote Stack Buffer Overflow // source: https://www.securityfocus.com/bid/31418/info DATAC RealWin SCADA server is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker c...
DATAC RealWin SCADA Server 2.0 - Remote Stack Buffer Overflow
// source: https://www.securityfocus.com/bid/31418/info DATAC RealWin SCADA server is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code in the context...
ABB PCU400 vulnerable to buffer overflow
Overview ABB PCU400 contains a vulnerability which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The ABB PCU400 application serves as a communication gateway between RTUs that use the IEC-870-5-104 protocol and the SCADA server. The...
Heap overflow
Heap-based buffer overflow in w32rtr.exe in GE Fanuc CIMPLICITY HMI SCADA system 7.0 before 7.0 SIM 9, and earlier versions before 6.1 SP6 Hot fix - 0107081625176106, allow remote attackers to execute arbitrary code via unknown vectors...
CVE-2008-0176
Heap-based buffer overflow in w32rtr.exe in GE Fanuc CIMPLICITY HMI SCADA system 7.0 before 7.0 SIM 9, and earlier versions before 6.1 SP6 Hot fix - 0107081625176106, allow remote attackers to execute arbitrary code via unknown vectors...
CVE-2008-0176
Heap-based buffer overflow in w32rtr.exe in GE Fanuc CIMPLICITY HMI SCADA system 7.0 before 7.0 SIM 9, and earlier versions before 6.1 SP6 Hot fix - 0107081625176106, allow remote attackers to execute arbitrary code via unknown vectors...
CVE-2008-0176
GE Fanuc CIMPLICITY HMI contains a heap-based buffer overflow in w32rtr.exe that can be exploited remotely (network port 32000/tcp) to execute arbitrary code. Affected: CIMPLICITY HMI 6.1 (including SP6 hotfix 010708_162517_6106) and CIMPLICITY 7.0 up to SIM 9; older versions may also be vulnerab...
C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Authentication Vulnerability
Background ----------------- GE-Fanuc's Proficy Information Portal 2.6 is a web based reporting application for the SCADA environment. As such it will usually be installed in a buffer zone between the SCADA and the corporate network, which makes it a very sensitive application as it can access bo...
C4 Security Advisory - GE Fanuc Cimplicity 6.1 Heap Overflow
Background ----------------- Vendor product information: CIMPLICITY is a powerful and technically advanced HMI/SCADA product. With its open system design approach, true client/server architecture, and the latest web technologies, CIMPLICITY allows you to realize the benefits of digitization for t...
GE Fanuc CIMPLICITY HMI heap buffer overflow
Overview GE Fanuc CIMPLICITY HMI contains a remotely accessible heap buffer overflow vulnerability which may allow a remote attacker to execute arbitrary code. Description GE Fanuc CIMPLICITY HMI is software used for monitoring and control in Supervisory Control And Data Acquisition SCADA systems...
GE Fanuc Proficy Information Portal allows arbitrary file upload and execution
Overview GE Fanuc Proficy Information Portal allows authenticated users to upload arbitrary files. An attacker could upload an executable server-side script e.g., an .asp shell on a Microsoft Internet Information Server platform and execute arbitrary commands with the privileges of the web server...
LiveData Protocol Server fails to properly handle requests for WSDL files
Overview The LiveData Protocol Server fails to properly handle requests. This vulnerability may allow a remote attacker to execute arbitrary code. Description The LiveData Protocol Server is real-time data acquisition and processing software used to record and transmit data among process control...
[NB07-10] Multiple vulnerabilities in Takebishi Electric DeviceXplorer MODBUS OPC server
Multiple vulnerabilities in Takebishi Electric DeviceXplorer MODBUS OPC server ============================================================================ == OPC servers provide a standard way to interoperate automation and control systems, bridging data from several industrial protocols such as...
[NB07-07] Multiple vulnerabilities in Takebishi Electric DeviceXplorer HIDIC OPC server
Multiple vulnerabilities in Takebishi Electric DeviceXplorer HIDIC OPC server ============================================================================ = OPC servers provide a standard way to interoperate automation and control systems, bridging data from several industrial protocols such as...
