129 matches found
scadapack-secure-lock-poc
SCADAPack Secure Lock fixture verifier This repository is a deliberately bounded proof of concept for CVE-2026-81861. It verifies that two controlled fixtures produced with the vendor's shipped Windows DTM can be authenticated and decoded using common key material. It is not an operational exploi...
Exploit for CVE-2026-81861
SCADAPack Secure Lock fixture verifier This repository is a d...
Schneider Electric SCADAPack x70 Products
GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install physical controls so no unauthorized personnel can access...
Schneider Electric SCADAPack and RemoteConnect Improper Check For Unusual or Exceptional Conditions (CVE-2026-0667)
CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause remote code execution, denial of service, and loss of confidentiality and integrity of the RTU controller when an unauthenticated attacker sends specially crafted Modbus TCP packets to the device...
The vulnerability of Microprogrammed Software for Industrial Controllers SCADAPack 47xi, SCADAPack 47x, and SCADAPack 57x, as well as the SCADAPack RemoteConnect configuration software, stems from insufficient testing of unusual or exceptional states. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the microprogrammed software of the SCADAPack 47xi, SCADAPack 47x, and SCADAPack 57x systems lies in the insufficient testing of unusual or exceptional states. Exploiting this vulnerability could allow an attacker operating remotely to compromise the confidentiality, integrit...
PT-2026-20458
Name of the Vulnerable Software and Affected Versions Schneider Electric SCADAPack 47xi, SCADAPack 47x and SCADAPack 57x affected versions not specified Description A flaw exists in the firmware of Schneider Electric industrial controllers. This issue involves insufficient validation of unusual o...
CVE-2021-22781
Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...
CVE-2021-22782
Missing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, and SCADAPack RemoteConnect for x70, all version...
CVE-2020-7530
A CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect V3.6.3.574 and prior which allows improper access to executable code folders...
CVE-2020-7532
A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator V1.2.0 and prior which could allow arbitrary code execution when an attacker builds a custom .SDB file containing a malicious serialized buffer...
CVE-2020-7528
A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect V3.6.3.574 and prior which could allow arbitrary code execution when an attacker builds a custom .PRJ file containing a malicious serialized buffer...
CVE-2020-7531
A CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect V3.6.3.574 and prior which allows an attacker to place executables in a specific folder and run code whenever RemoteConnect is executed by the user...
EUVD-2020-28654
Malware in sbrugna...
EUVD-2020-28657
Malware in sbrugna...
EUVD-2020-28656
Malware in sbrugna...
EUVD-2020-28653
Malware in sbrugna...
EUVD-2020-28655
Malware in sbrugna...
EUVD-2021-9932
Malicious code in bioql PyPI...