Z-0ne – 灯塔实验室

HomeAuthor Z-0ne

2017/12/292017/12/29Z-0neLeave a comment 1740 views

灯塔资讯中心Beta版本发布

我们实验室于近期推出了一个工控安全资讯搜集与分享工具（https://cert.plcscan.org），长久…

2017/06/052017/06/05Z-0neLeave a comment 3182 views

超过8800个工业物联网云中心暴露于公网－DTU数据中心态势感知报告

本研究报告为工业物联网安全态势分析报告的第一期，由灯塔实验室原创，转载请注明出处。点击下载本报告的PDF版本…

2017/03/112017/03/11Z-0neLeave a comment 4550 views

Struts2 S2-045漏洞态势分析报告

事件回顾 3月7日，来自安恒信息安全研究院WEBIN实验室高级安全研究员nike.zheng发现著名J2EE框…

2016/04/092016/04/13Z-0neLeave a comment 3169 views

Moxa Nport串口服务器漏洞全球统计报告(Moxa Nport Vulnerability Global Census Report)

ICS-ALERT-16-099-01 ICS-CERT在4月8日发布了ICS-ALERT-16-099-01…

2016/03/292016/03/29Z-0neLeave a comment 2173 views

对西门子PLC CPU运行状态的一次全球监测统计

本文由灯塔实验室原创，转载请注明出处。关于西门子PLC的CPU运行状态我们曾在上周的文章中提到过，根据部署…

2016/03/202016/03/20Z-0neLeave a comment 2384 views

浅谈一次针对公网PLC恶意操作行为的简单分析

本文由灯塔实验室原创，转载请注明出处。说到本文的起因是源于我们部署在公网的一个针对西门子PLC S7协议（S…

2015/11/262015/11/26Z-0neLeave a comment 5678 views

使用Wireshark分析工控协议

在工控系统中通信协议存在众多标准，也存在众多私有协议，如果你有过使用组态软件的经历，你便会发现，在第一步连接设…

2015/11/102015/11/10Z-0neLeave a comment 4553 views

使用FINS协议攻击欧姆龙（Omron）PLC的物理（I/O）输出

提到对PLC的攻击往往除了PLC设备本身存在的缺陷和漏洞外，要实现对PLC内运行的逻辑在特定环境下达到特定的攻…

2015/10/222015/10/22Z-0neLeave a comment 2492 views

解决工控网络通信协议威胁的实践

来自于工控通信协议的威胁工控通信协议作为工控设备与应用、设备与设备之间沟通的一种重要语言。工控系统中如果需要…

This medical advisory includes mitigations for a reusing a nonce vulnerability in certain BD Pyxis medication and supply management systems.. . . read more Tue, 24 Apr 2018 10:15:01 EDT

Vecna VGo Robot

This advisory includes mitigations for OS command injection and cleartext transmission vulnerabilities in Vecna Technologies' VGo Robot, a mobile robotic assistant.. . . read more Tue, 24 Apr 2018 10:10:01 EDT

This advisory includes mitigation details for a buffer overflow vulnerability identified in the Intel 2G modem.. . . read more Tue, 24 Apr 2018 10:05:01 EDT

Advantech WebAccess HMI Designer

This advisory includes mitigations for heap-based buffer overflow, double free, and out-of-bounds write vulnerabilities in the Advantech WebAccess HMI Designer.. . . read more Tue, 24 Apr 2018 10:00:58 EDT

Siemens SIMATIC WinCC OA Operator IOS App

This advisory includes mitigations for a file and directory information exposure vulnerability identified in the Siemens WinCC OA iOS App.. . . read more Thu, 19 Apr 2018 14:13:02 EDT

Abbott Laboratories Defibrillator

This medical advisory includes mitigations for improper authentication and improper restriction of power consumption vulnerabilities identified in Abbott Laboratories' defibrillators.. . . read more Tue, 17 Apr 2018 10:30:01 EDT

Biosense Webster Carto 3 System Vulnerabilities

This medical advisory includes mitigations for a large number of vulnerabilties in the Biosense Webster Carto 3 cardiovascular mapping platform.. . . read more Tue, 17 Apr 2018 10:25:01 EDT

Schneider Electric InduSoft Web Studio and InTouch Machine Edition

This advisory includes mitigations for a stack-based buffer overflow vulnerability in the Schneider Electric's InduSoft Web Studio and InTouch Machine HMI.. . . read more Tue, 17 Apr 2018 10:20:01 EDT

Schneider Electric Triconex Tricon

This advisory includes mitigations for improper restriction of operations within the bounds of a memory buffer vulnerabilities in Schneider Electric's Triconex Tricon safety instrumented system.. . . read more Tue, 17 Apr 2018 10:15:01 EDT

Rockwell Automation Stratix Services Router

This advisory includes mitigations for improper input validation, improper restriction of operations, and use of externally-controlled format string vulnerabilities in the Rockwell Automation Stratix 5900 router.. . . read more Tue, 17 Apr 2018 10:10:01 EDT

Rockwell Automation Stratix and ArmorStratix Switches

This advisory includes mitigations for improper improper input validation, resource management, memory buffer and externally-controlled format string vulnerabilities in Rockwell Automation's Allen-Bradley Stratix and ArmorStratix Switches.. . . read more Tue, 17 Apr 2018 10:05:01 EDT

Rockwell Automation Stratix Industrial Managed Ethernet Switch

This advisory includes mitigations for improper imput validation, resource managment, 7PK, memory buffer and externally-controlled format string vulnerabilities in Rockwell Automation's Stratix Industrial Managed Switch.. . . read more Tue, 17 Apr 2018 10:00:01 EDT

Yokogawa CENTUM and Exaopc

This advisory includes mitigations for a permissions, privileges, and access controls vulnerability in the Yokogawa CENTUM series and Exaopc products.. . . read more Thu, 12 Apr 2018 10:05:42 EDT

ATI Systems Emergency Mass Notification Systems

This advisory includes mitigations for improper authentication and missing encryption of sensitive data vulnerabilities in the ATI Systems Emergency Mass Notification Systems.. . . read more Tue, 10 Apr 2018 10:05:09 EDT

This advisory includes mitigations for heap-based buffer overflow, stack-based buffer overflow, and type confusion vulnerabilities in Omron CX-One software.. . . read more Tue, 10 Apr 2018 10:00:01 EDT

Rockwell Automation MicroLogix

This advisory includes mitigations for an improper authentication vulnerability in the Rockwell MicroLogix Controller.. . . read more Thu, 05 Apr 2018 11:26:48 EDT

This advisory includes mitigations for an information exposure vulnerability in the Moxa MXview network management software.. . . read more Thu, 05 Apr 2018 10:05:01 EDT

LCDS – Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA

This advisory includes mitigations for an improper check or handling of exceptional conditions vulnerability in LCDS – Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA device.. . . read more Thu, 05 Apr 2018 10:00:01 EDT

Siemens Building Technologies Products (Update A)

This updated advisory is a follow-up to the original advisory titled ICSA-18-093-01 Siemens Building Technologies Products that was published April 3, 2018, on the NCCIC/ICS-CERT website. This advisory update includes mitigations for a series of vulnerabilities in Siemens' Building Technologies Products, including stack-based buffer overflows, security features, improper restriction of operat. . . read more Tue, 03 Apr 2018 10:00:22 EDT

Philips iSite/IntelliSpace PACS Vulnerabilities

This advisory includes mitigation recommendations for vulnerabilities identified in the Philips Philips iSite and IntelliSpace PACS.. . . read more Thu, 29 Mar 2018 14:35:44 EDT