CVE-2016-4523

The WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service out-of-bounds read and application crash via unspecified vectors...

PT-2016-6006

Name of the Vulnerable Software and Affected Versions Trihedral VTScada versions 8.x through 11.x before 11.2.02 Description The issue allows remote attackers to read arbitrary files via a crafted pathname, due to a directory traversal vulnerability in the WAP interface. Recommendations For...

CVE-2016-4510: Improper Authentication

The WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files via unspecified vectors...

PT-2016-5992

Name of the Vulnerable Software and Affected Versions Trihedral VTScada versions 8.x through 11.x before 11.2.02 Description The issue allows remote attackers to bypass authentication and read arbitrary files. Recommendations For versions 8.x through 11.x before 11.2.02, update to version 11.2.02...

CVE-2016-4532: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to read arbitrary files via a crafted pathname...

CVE-2016-4523

The WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service out-of-bounds read and application crash via unspecified vectors. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker...

CVE-2016-4523: Out-of-bounds Read

The WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service out-of-bounds read and application crash via unspecified vectors...

Trihedral Engineering Limited VTScada Vulnerabilities

OVERVIEW An anonymous researcher has identified several vulnerabilities in Trihedral Engineering Ltd.’s Trihedral VTScada and reported them to Zero Day Initiative ZDI, which reported them to NCCIC/ICS-CERT. Trihedral Engineering Ltd. has produced a new version to mitigate these vulnerabilities...

Trihedral VTScada 6.5.x < 9.1.20 / 10.x < 10.2.22 / 11.x < 11.1.09 HTTP Server DoS

Binary data scadatrihedralvtscada11109.nbin...

Trihedral VTScada Detection

Binary data scadaapptrihedralvtscadadetect.nbin...

Network Time Protocol Vulnerabilities (Supplement Update A)

OVERVIEW --------- Begin Update A Part 1 of 2 -------- This advisory supplement is to accompany the NCCIC/ICS-CERT advisory titled ICSA-14-353-01C Network Time Protocol Vulnerabilities that was published February 5, 2015, on the ICS‑CERT web site. --------- End Update A Part 1 of 2 ----------...

Trihedral VTScada Server Detection

Binary data 8578.prm...

Trihedral VTScada 6.5 through 9.x <= 9.1.19, 10.x <= 10.2.21, and 11.x <= 11.1.08 Remote Denial of Service

Binary data 8609.prm...

Trihedral VTScada Integer Overflow Denial of Service Vulnerability

This vulnerability allows remote attackers to cause a denial of service to vulnerable installations of Trihedral VTScada. Authentication is not required to exploit this vulnerability. The specific flaw exists within the included HTTP server. By providing a small negative content length, an attack...

Integer overflow

Integer overflow in Trihedral Engineering VTScada formerly VTS 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service server crash via a crafted request, which triggers a large memory allocation...

CVE-2014-9192

CVE-2014-9192 is a concrete integer-overflow vulnerability in Trihedral VTScada (formerly VTS) HTTP server. The flaw allows remote attackers to trigger an enormous memory allocation by sending crafted requests (notably with problematic Content-Length handling), causing the VTScada server to crash...

CVE-2014-9192 Trihedral Engineering Limited VTScada Integer Overflow

Integer overflow in Trihedral Engineering VTScada formerly VTS 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service server crash via a crafted request, which triggers a large memory allocation...

CVE-2014-9192: Integer Overflow or Wraparound

Integer overflow in Trihedral Engineering VTScada formerly VTS 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service server crash via a crafted request, which triggers a large memory allocation...

PT-2014-8878

Name of the Vulnerable Software and Affected Versions Trihedral Engineering VTScada versions 6.5 through 9.x before 9.1.20 Trihedral Engineering VTScada versions 10.x before 10.2.22 Trihedral Engineering VTScada versions 11.x before 11.1.07 Description The issue is related to an integer overflow...

Trihedral Engineering Limited VTScada Integer Overflow Vulnerability

OVERVIEW An anonymous researcher working with HP’s Zero Day Initiative has identified an integer overflow vulnerability in Trihedral Engineering Ltd’s VTScada application. Trihedral Engineering Limited has produced a patch that mitigates this vulnerability. This vulnerability could be exploited...