超过8800个工业物联网云中心暴露于公网－DTU数据中心态势感知报告
本研究报告为工业物联网安全态势分析报告的第一期，由灯塔实验室原创，转载请注明出处。 点击下载本报告的PDF版本…
最新工业控制系统漏洞
NXP i.MX Product Family
This advisory was originally posted to the NCCIC Portal on June 1, 2017, and is being released to the NCCIC/ICS-CERT web site. This advisory contains mitigation details for stack-based buffer overflow and improper certificate validation vulnerabilities in the NXP i.MX Product Family.. . . read more Tue, 25 Jul 2017 10:00:38 EDT
Schneider Electric PowerSCADA Anywhere and Citect Anywhere
This advisory contains mitigation details for information exposure, cross-site request forgery, improper neutralization of expression, and improper validation of certificate expiration vulnerabilities in Schneider Electric’s PowerSCADA Anywhere and Citect Anywhere.. . . read more Thu, 20 Jul 2017 10:00:21 EDT
Rockwell Automation MicroLogix 1100 Controllers
This advisory was originally posted to the NCCIC Portal on May 18, 2017, and is being released to the NCCIC/ICS-CERT web site. This advisory contains mitigation details for an improper input validation vulnerability in the Rockwell Automation MicroLogix 1100 Controllers.. . . read more Tue, 18 Jul 2017 10:00:25 EDT
Siemens SiPass integrated
This advisory contains mitigation details for improper authentication, improper privilege management, channel accessible by non-endpoint, and storing passwords in a recoverable format vulnerabilities in the Siemens SiPass integrated access control system.. . . read more Thu, 13 Jul 2017 10:10:36 EDT
Siemens SIMATIC [email protected] Android App
This advisory contains mitigation details for man-in-the-middle and authentication bypass using an alternate path or channel vulnerabilities in the Siemens SIMATIC [email protected] Android App.. . . read more Thu, 13 Jul 2017 10:00:57 EDT
Siemens SIMATIC Logon
This advisory contains mitigation details for an out-of-bounds write vulnerability in the Siemens SIMATIC Logon.. . . read more Tue, 11 Jul 2017 10:25:53 EDT
Fuji Electric V-Server
This advisory contains mitigation details for an improper restriction of operations within the bounds of a memory buffer vulnerability in the Fuji Electric V-Server.. . . read more Tue, 11 Jul 2017 10:20:10 EDT
ABB VSN300 WiFi Logger Card
This advisory contains mitigation details for improper authentication and permissions, privileges, and access controls vulnerabilities in ABB’s VSN300 Wi-Fi Logger Card.. . . read more Tue, 11 Jul 2017 10:15:06 EDT
OSIsoft PI Coresight
This advisory contains mitigation details for a cross-site request forgery vulnerability in OSIsoft’s PI Coresight 2016 R2 and earlier versions.. . . read more Tue, 11 Jul 2017 10:10:56 EDT
OSIsoft PI ProcessBook and PI ActiveView
This advisory contains mitigation details for vulnerabilities in third party components used by OSIsoft's PI ProcessBook 2015 R2 (3.6.0) and earlier versions and PI ActiveView 2015 R2 (3.6.0) and earlier versions.. . . read more Tue, 11 Jul 2017 10:05:49 EDT
Schweitzer Engineering Laboratories, Inc. SEL-3620 and SEL-3622
This advisory contains mitigation details for an improper access control vulnerability in the Schweitzer Engineering Laboratories, Inc. SEL-3620 and SEL-3622.. . . read more Tue, 11 Jul 2017 10:00:34 EDT
Siemens OZW672 and OZW772
This advisory contains mitigation details for missing authentication vulnerabilities in the Siemens OZW672 and OZW772 devices.. . . read more Thu, 06 Jul 2017 10:20:39 EDT
Siemens Reyrolle
This advisory contains mitigation details for missing authorization, improper input validation, and improper authentication vulnerabilities in the Siemens Reyrolle integration, control, measurement, and automation products.. . . read more Thu, 06 Jul 2017 10:15:46 EDT
Siemens SIPROTEC 4 and SIPROTEC Compact (Update A)
This updated advisory is a follow-up to the original advisory titled ICSA-17-187-03 Siemens SIPROTEC 4 and SIPROTEC Compact that was published July 6, 2017, on the NCCIC/ICS-CERT web site. This updated advisory contains mitigation details for improper input validation, missing authorization, and improper authentication vulnerabilities in the Siemens SIPROTEC 4 and SIPROTEC Compact devices.. . . read more Thu, 06 Jul 2017 10:10:10 EDT
Schneider Electric Wonderware ArchestrA Logger
This advisory contains mitigation details for stack-based buffer overflow, uncontrolled resource consumption, and null pointer deference vulnerabilities in Schneider Electric’s Wonderware ArchestrA Logger.. . . read more Thu, 06 Jul 2017 10:05:44 EDT
Schneider Electric Ampla MES
This advisory contains mitigation details for cleartext transmission of sensitive information and inadequate encryption strength vulnerabilities in Schneider Electric’s Ampla MES.. . . read more Thu, 06 Jul 2017 10:00:03 EDT
Siemens SIMATIC Industrial PCs, SINUMERIK Panel Control Unit, and SIMOTION P320 (Update A)
This updated advisory is a follow-up to the original advisory titled ICSA-17-180-01 Siemens Industrial Products using Intel Processors that was published June 29, 2017, on the NCCIC/ICS-CERT web site. This updated advisory contains mitigation details for a permissions, privileges, and access controls vulnerability that affects Siemens Industrial products which use Intel processors.. . . read more Thu, 29 Jun 2017 10:10:00 EDT
Schneider Electric U.motion Builder
This advisory contains mitigation details for SQL injection, path traversal, improper authentication, use of hard-coded password, improper access control, denial of service, and information disclosure vulnerabilities in Schneider Electric’s U.motion Builder.. . . read more Thu, 29 Jun 2017 10:05:00 EDT
Siemens Viewport for Web Office Portal
This advisory contains mitigation details for an improper authentication vulnerability in the Siemens Viewport for Web Office Portal.. . . read more Thu, 29 Jun 2017 10:00:10 EDT
Newport XPS-Cx, XPS-Qx
This advisory contains mitigation details for an improper authentication vulnerability in the Newport XPS-Cx and XPS-Qx controllers.. . . read more Tue, 27 Jun 2017 10:00:29 EDT