BroadWin WebAccess SCADA Client ActiveX Format String

Added: 12/12/2011 OSVDB: 74897 Background BroadWin WebAccess is a web-based SCADA reporting and control solution. Problem BroadWin WebAccess installs an ActiveX Control in the user's browser. The OcxSpool function of this control accepts a parameter that is evaluated using a format string. A form...

SCADA 3S CoDeSys CmpWebServer Stack Buffer Overflow

This module exploits a remote stack buffer overflow vulnerability in 3S-Smart Software Solutions product CoDeSys Scada Web Server Version 1.1.9.9. This vulnerability affects versions 3.4 SP4 Patch 2 and earlier. Module Options msf use exploit/windows/scada/codesys/webserver msf undefinedwebserver...

Advantech / BroadWin WebAccess webvrpcs.exe Service Remote Code Execution (uncredentialed check) (deprecated)

The Advantech / BroadWin WebAccess software installed on the remote Windows host includes an RPC service webvrpcs.exe that listens remotely on TCP port 4592. It is affected by two vulnerabilities : - An overflow condition exists due to improper validation of user-supplied input. An unauthenticate...

CoDeSys SCADA 2.3 - Remote Buffer Overflow

CoDeSys SCADA 2.3 - Remote Buffer Overflow / See Also: http://aluigi.altervista.org/adv/codesys1-adv.txt CoDeSys v2.3 Industrial Control System Development Software Remote Buffer Overflow Exploit for CoDeSys Scada webserver Author : Celil UNUVER, SignalSEC Labs www.signalsec.com Tested on WinXP S...

CoDeSys SCADA v2.3 Remote Exploit

Exploit for windows platform in category remote exploits / CoDeSys v2.3 Industrial Control System Development Software Remote Buffer Overflow Exploit for CoDeSys Scada webserver Author : Celil UNUVER, SignalSEC Labs www.signalsec.com Tested on WinXP SP1 EN THIS CODE IS FOR EDUCATIONAL PURPOSES...

CoDeSys SCADA 2.3 - Remote Buffer Overflow

/ See Also: http://aluigi.altervista.org/adv/codesys1-adv.txt CoDeSys v2.3 Industrial Control System Development Software Remote Buffer Overflow Exploit for CoDeSys Scada webserver Author : Celil UNUVER, SignalSEC Labs www.signalsec.com Tested on WinXP SP1 EN THIS CODE IS FOR EDUCATIONAL PURPOSES...

Was The Three Character Password Used To Hack South Houston's Water Treatment Plant A Siemens Default?

Siemens said on Tuesday that it is working with the U.S. Department of Homeland Security to investigate a cyber intrusion into a water treatment plant in South Houston, Texas, but couldn’t confirm that a default, three digit password hard coded into an application used to control the company’s...

Hacker Says Texas Town Used Three Character Password To Secure Internet Facing SCADA System

In an e-mail interview with Threatpost, the hacker who compromised software used to manage water infrastructure for South Houston, Texas, said the district had HMI human machine interface software used to manage water and sewage infrastructure accessible to the Internet and used a password that w...

Hacker Claims He Breached Texas Water Plant

A hacker claims to have breached a water utility in Texas and has posted reputed screenshots online to prove it. The water plant targeted by the hacker, who uses the alias “Pr0f”, is in the Harris County city of South Houston. In a post on Pastebin, Pr0f said his actions were in response to what ...

Water Utility Damaged by Cyberattack

An electronic attack believed to emanate from computers in Russia reportedly destroyed a water pump belonging to an unnamed, Springfield, Illinois water utility earlier this month after hackers gained unauthorized access to that company’s industrial control system, according to published reports....

optima apiftp server 1.5.2.13 - Multiple Vulnerabilities

Luigi Auriemma Application: Optima APIFTP Server http://www.optimalog.com/home.html Versions: = 1.5.2.13 Platforms: Windows Bugs: A NULL pointer B endless loop Exploitation: remote Date: 13 Nov 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bugs 3 The Co...

KingView-Scada

Stack-Based buffer overflow in KingView 6.5.3 SCADA HMI allow remote attackers to cause a DoS or execute arbitrary code via a long filename in a read or write request. The vulnerability is caused due to a boundary error in the handling of filenames and can be exploited to cause a stack-based buff...

SCADA DNP3 Server Response Flooding

A vulnerability exists in DNP3 protocol An attacker can use this exploit to perform unauthorized actions There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

SCADA DNP3 Unsolicited Server Response Flooding

A vulnerability exists in DNP3 protocol An attacker can use this exploit to perform unauthorized actions There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

First Ever Joint EU-US Cyber War Game Starts

Despite extreme upheaval and rampant infighting caused by the European debt crisis, the EU and U.S. are banding together today in Brussels and shifting its focus toward cyber security. The European Network and Information Security Agency ENISA and the U.S. Department of Homeland Security will be...

CoDeSyS-SCADA-Server

CoDeSyS SCADA Exploit. Vulnerability occurs while parsing long HTTP requests in webserver. import string, sys import socket, httplib import telnetlib Target = sys.argv1 Port = intsys.argv2 ShellcodeType = sys.argv3 def howtousage: print "Sorry, required arguments: Host Port" sys.exit-1 def run:...

Modbus Version Scanner

This module detects the Modbus service, tested on a SAIA PCD1.M2 system. Modbus is a clear text protocol used in common SCADA systems, developed originally as a serial-line RS232 async protocol, and later transformed to IP, which is called ModbusTCP. Module Options msf use...

BroadWin Webaccess SCADAHMI Client - Remote Code Execution

BroadWin Webaccess SCADAHMI Client - Remote Code Execution BroadWin WebAccess SCADA/HMI Remote Code Execution Vulnerability 0day WebAccess is the first fully web browser-based software package for human-machine interfaces HMI, and supervisory control and data acquisition SCADA. bwocxrun.ocx Activ...

BroadWin Webaccess SCADA/HMI Client - Remote Code Execution

BroadWin WebAccess SCADA/HMI Remote Code Execution Vulnerability 0day WebAccess is the first fully web browser-based software package for human-machine interfaces HMI, and supervisory control and data acquisition SCADA. bwocxrun.ocx ActiveX component is prone to a remote code execution...

BroadWin WebAccess SCADA / HMI Code Execution

BroadWin WebAccess SCADA/HMI Client Remote Code Execution Vulnerability 0day WebAccess is the first fully web browser-based software package for human-machine interfaces HMI, and supervisory control and data acquisition SCADA. bwocxrun.ocx ActiveX component is prone to a remote code execution...