2014年6月 – 灯塔实验室

2014/06/302014/06/30Z-0neLeave a comment 882 views

Havex Rat又一个针对ICS/SCADA系统的恶意软件

F-secure的安全研究人员于早前发现了一种针对ICS/SCADA系统的恶意软件，该恶意程序的操作者通过水坑…

2014/06/262014/06/27Z-0neLeave a comment 1143 views

西门子S7-200 Smart PLC远程操作CPU状态

西门子S7-200 Smart PLC在无密码认证的模式下(通过以太网)远程实现启停CPU操作。西门子S7系…

2014/06/252014/06/26Z-0neLeave a comment 1131 views

部分PLC以太网模块或以太网通信端口列表

谈到传统安全针对网络的扫描器多得不胜枚举，而在工控方面，比较实用的扫描工具有国外ScadaStrangeLov…

2014/06/242014/06/24Z-0neLeave a comment 960 views

Google/Shodan dorks Update(2)

Mitsubishi Programmable Controller Ethernet Mode FTP:22…

2014/06/232014/06/23Z-0neLeave a comment 918 views

Google/Shodan dorks Update(1)

GE Fanuc VMSE mode SNMP:GE Fanuc Automation, Inc. VMSE …

2014/06/202014/06/23Z-0neLeave a comment 1726 views

通用快速识别GE PLC(General Electric)以太网通信模块

0x1 这里我们以GE RX3I系列的IC695CPE305 CPU模块为例，通过Nma…

2014/06/172014/06/17Z-0neLeave a comment 1542 views

分享一个施耐德以太网模块的老版本固件

获取方式 Unity OS Loader于NOE 771 01模块远程上传（V3.60版本固件FTP使用默认口…

2014/06/122014/06/16Z-0neLeave a comment 2707 views

施耐德PLC以太网模块后门账户解密

早在两年前CVE-2011-4859等多个施耐德PLC硬编码漏洞，随着Basecamp的研究项目而曝光，硬编码…

This medical advisory includes mitigations for a reusing a nonce vulnerability in certain BD Pyxis medication and supply management systems.. . . read more Tue, 24 Apr 2018 10:15:01 EDT

Vecna VGo Robot

This advisory includes mitigations for OS command injection and cleartext transmission vulnerabilities in Vecna Technologies' VGo Robot, a mobile robotic assistant.. . . read more Tue, 24 Apr 2018 10:10:01 EDT

This advisory includes mitigation details for a buffer overflow vulnerability identified in the Intel 2G modem.. . . read more Tue, 24 Apr 2018 10:05:01 EDT

Advantech WebAccess HMI Designer

This advisory includes mitigations for heap-based buffer overflow, double free, and out-of-bounds write vulnerabilities in the Advantech WebAccess HMI Designer.. . . read more Tue, 24 Apr 2018 10:00:58 EDT

Siemens SIMATIC WinCC OA Operator IOS App

This advisory includes mitigations for a file and directory information exposure vulnerability identified in the Siemens WinCC OA iOS App.. . . read more Thu, 19 Apr 2018 14:13:02 EDT

Abbott Laboratories Defibrillator

This medical advisory includes mitigations for improper authentication and improper restriction of power consumption vulnerabilities identified in Abbott Laboratories' defibrillators.. . . read more Tue, 17 Apr 2018 10:30:01 EDT

Biosense Webster Carto 3 System Vulnerabilities

This medical advisory includes mitigations for a large number of vulnerabilties in the Biosense Webster Carto 3 cardiovascular mapping platform.. . . read more Tue, 17 Apr 2018 10:25:01 EDT

Schneider Electric InduSoft Web Studio and InTouch Machine Edition

This advisory includes mitigations for a stack-based buffer overflow vulnerability in the Schneider Electric's InduSoft Web Studio and InTouch Machine HMI.. . . read more Tue, 17 Apr 2018 10:20:01 EDT

Schneider Electric Triconex Tricon

This advisory includes mitigations for improper restriction of operations within the bounds of a memory buffer vulnerabilities in Schneider Electric's Triconex Tricon safety instrumented system.. . . read more Tue, 17 Apr 2018 10:15:01 EDT

Rockwell Automation Stratix Services Router

This advisory includes mitigations for improper input validation, improper restriction of operations, and use of externally-controlled format string vulnerabilities in the Rockwell Automation Stratix 5900 router.. . . read more Tue, 17 Apr 2018 10:10:01 EDT

Rockwell Automation Stratix and ArmorStratix Switches

This advisory includes mitigations for improper improper input validation, resource management, memory buffer and externally-controlled format string vulnerabilities in Rockwell Automation's Allen-Bradley Stratix and ArmorStratix Switches.. . . read more Tue, 17 Apr 2018 10:05:01 EDT

Rockwell Automation Stratix Industrial Managed Ethernet Switch

This advisory includes mitigations for improper imput validation, resource managment, 7PK, memory buffer and externally-controlled format string vulnerabilities in Rockwell Automation's Stratix Industrial Managed Switch.. . . read more Tue, 17 Apr 2018 10:00:01 EDT

Yokogawa CENTUM and Exaopc

This advisory includes mitigations for a permissions, privileges, and access controls vulnerability in the Yokogawa CENTUM series and Exaopc products.. . . read more Thu, 12 Apr 2018 10:05:42 EDT

ATI Systems Emergency Mass Notification Systems

This advisory includes mitigations for improper authentication and missing encryption of sensitive data vulnerabilities in the ATI Systems Emergency Mass Notification Systems.. . . read more Tue, 10 Apr 2018 10:05:09 EDT

This advisory includes mitigations for heap-based buffer overflow, stack-based buffer overflow, and type confusion vulnerabilities in Omron CX-One software.. . . read more Tue, 10 Apr 2018 10:00:01 EDT

Rockwell Automation MicroLogix

This advisory includes mitigations for an improper authentication vulnerability in the Rockwell MicroLogix Controller.. . . read more Thu, 05 Apr 2018 11:26:48 EDT

This advisory includes mitigations for an information exposure vulnerability in the Moxa MXview network management software.. . . read more Thu, 05 Apr 2018 10:05:01 EDT

LCDS – Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA

This advisory includes mitigations for an improper check or handling of exceptional conditions vulnerability in LCDS – Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA device.. . . read more Thu, 05 Apr 2018 10:00:01 EDT

Siemens Building Technologies Products (Update A)

This updated advisory is a follow-up to the original advisory titled ICSA-18-093-01 Siemens Building Technologies Products that was published April 3, 2018, on the NCCIC/ICS-CERT website. This advisory update includes mitigations for a series of vulnerabilities in Siemens' Building Technologies Products, including stack-based buffer overflows, security features, improper restriction of operat. . . read more Tue, 03 Apr 2018 10:00:22 EDT

Philips iSite/IntelliSpace PACS Vulnerabilities

This advisory includes mitigation recommendations for vulnerabilities identified in the Philips Philips iSite and IntelliSpace PACS.. . . read more Thu, 29 Mar 2018 14:35:44 EDT