2014年6月 – 灯塔实验室

2014/06/302014/06/30Z-0neLeave a comment 3445 views

Havex Rat又一个针对ICS/SCADA系统的恶意软件

F-secure的安全研究人员于早前发现了一种针对ICS/SCADA系统的恶意软件，该恶意程序的操作者通过水坑…

2014/06/262014/06/27Z-0neLeave a comment 3450 views

西门子S7-200 Smart PLC远程操作CPU状态

西门子S7-200 Smart PLC在无密码认证的模式下(通过以太网)远程实现启停CPU操作。西门子S7系…

2014/06/252014/06/26Z-0neLeave a comment 4132 views

部分PLC以太网模块或以太网通信端口列表

谈到传统安全针对网络的扫描器多得不胜枚举，而在工控方面，比较实用的扫描工具有国外ScadaStrangeLov…

2014/06/242014/06/24Z-0neLeave a comment 3364 views

Google/Shodan dorks Update(2)

Mitsubishi Programmable Controller Ethernet Mode FTP:22…

2014/06/232014/06/23Z-0neLeave a comment 3022 views

Google/Shodan dorks Update(1)

GE Fanuc VMSE mode SNMP:GE Fanuc Automation, Inc. VMSE …

2014/06/202014/06/23Z-0neLeave a comment 5092 views

通用快速识别GE PLC(General Electric)以太网通信模块

0x1 这里我们以GE RX3I系列的IC695CPE305 CPU模块为例，通过Nma…

2014/06/172014/06/17Z-0neLeave a comment 4457 views

分享一个施耐德以太网模块的老版本固件

获取方式 Unity OS Loader于NOE 771 01模块远程上传（V3.60版本固件FTP使用默认口…

2014/06/122014/06/16Z-0neLeave a comment 6035 views

施耐德PLC以太网模块后门账户解密

早在两年前CVE-2011-4859等多个施耐德PLC硬编码漏洞，随着Basecamp的研究项目而曝光，硬编码…

ICS-CERT Advisory Feed

Delta Industrial Automation CNCSoft

This advisory includes mitigations for heap-based buffer overflow, out-of-bounds read, and stack-based buffer overflow vulnerabilities reported in Del. . . read more Tue, 16 Apr 2019 10:10:11 EDT

WAGO Series 750-88x and 750-87x

This advisory includes mitigations for a use of hard-coded credentials vulnerability reported in WAGO's 750-88x and 750-87x programmable logic co. . . read more Tue, 16 Apr 2019 10:05:55 EDT

PLC Cycle Time Influences

This advisory includes mitigations for an uncontrolled resource consumption vulnerability reported in ABB, Phoenix Contact, Schneider Electric, Siemen. . . read more Tue, 16 Apr 2019 10:00:24 EDT

Siemens SIMOCODE pro V EIP

This advisory includes mitigations for an uncontrolled resource consumption vulnerability reported in Siemens' SIMOCODE pro V EIP low-voltage mot. . . read more Tue, 09 Apr 2019 10:25:33 EDT

Siemens Spectrum Power 4.7

This advisory includes mitigations for a command injection vulnerability reported in Siemens' Spectrum Power 4.7 system.. . . read more Tue, 09 Apr 2019 10:20:24 EDT

Siemens Industrial Products with OPC UA

This advisory includes mitigations for an uncaught exception vulnerability in Siemens' Industrial Products using OPS UA communications protocol.. . . read more Tue, 09 Apr 2019 10:15:11 EDT

Siemens SINEMA Remote Connect

This advisory includes mitigations for incorrect calculation of buffer size, out-of-bounds read, stack-based buffer overflow, and improper handling of. . . read more Tue, 09 Apr 2019 10:10:11 EDT

Siemens RUGGEDCOM ROX II

This advisory includes mitigations for double free, out-of-bounds read, and uncontrolled resource consumption vulnerabilities reported in Siemens'. . . read more Tue, 09 Apr 2019 10:05:16 EDT

Siemens CP, SIAMTIC, SIMOCODE, SINAMICS, SITOP, and TIM

This advisory includes mitigations for an out-of-bounds read vulnerability reported in Siemens' CP, SIAMTIC, SIMOCODE, SINAMICS, SITOP, and TIM p. . . read more Tue, 09 Apr 2019 10:00:56 EDT

Omron CX-Programmer

This advisory includes mitigations for a use after free vulnerability reported in Omron's CX-Programmer PLC software.. . . read more Thu, 04 Apr 2019 10:15:11 EDT

Rockwell Automation Stratix 5400/5410/5700 and ArmorStratix 5700

This advisory includes mitigations for an uncontrolled resource consumption vulnerability reported in Rockwell Automation's Stratix and ArmorStra. . . read more Thu, 04 Apr 2019 10:10:11 EDT

Rockwell Automation Stratix 5400/5410/5700/8000/8300 and ArmorStratix 5700

This advisory includes mitigations for resource management errors and improper input validation vulnerabilities reported in Rockwell Automation's. . . read more Thu, 04 Apr 2019 10:05:19 EDT

Rockwell Automation Stratix 5950

This advisory includes mitigations for an improper input validation vulnerability reported in Rockwell Automation's Stratix 5950 security applian. . . read more Thu, 04 Apr 2019 10:00:23 EDT

Advantech WebAccess/SCADA

This advisory includes mitigations for command injection, stack-based buffer overflow, and improper access control vulnerabilities reported in Advante. . . read more Tue, 02 Apr 2019 10:00:11 EDT

Rockwell Automation PowerFlex 525 AC Drives

This advisory includes mitigations for a resource exhaustion vulnerability reported in Rockwell Automation's PowerFlex 525 AC drive.. . . read more Thu, 28 Mar 2019 10:00:11 EDT

Siemens SCALANCE X

This advisory includes mitigations for an expected behavior violation vulnerability reported in the Siemens SCALANCE X products.. . . read more Tue, 26 Mar 2019 10:15:18 EDT

PHOENIX CONTACT RAD-80211-XD

This advisory includes mitigations for a command injection vulnerability reported in Phoenix Contact's RAD-80211-XD WLAN wireless transceiver.. . . read more Tue, 26 Mar 2019 10:10:11 EDT

ENTTEC Lighting Controllers

This advisory includes mitigations for a missing authentication for critical function vulnerability reported in ENTTEC’s lighting controllers.. . . read more Tue, 26 Mar 2019 10:00:23 EDT

Medtronic Conexus Radio Frequency Telemetry Protocol

This medical advisory includes mitigations for improper access control and cleartext transmission of sensitive information vulnerabilities reported in. . . read more Thu, 21 Mar 2019 10:00:27 EDT

AVEVA InduSoft Web Studio and InTouch Edge HMI

This advisory includes mitigations for an uncontrolled search path element vulnerability in AVEVA's InduSoft Web Studio and InTouch Edge human ma. . . read more Tue, 19 Mar 2019 10:05:11 EDT