工控安全 – 灯塔实验室

HomeCategory 工控安全

2018/07/102018/07/10Z-0neLeave a comment 2225 views

灯塔实验室助力2018年工业信息安全技能大赛西部赛区

7月5日上午，2018年工业信息安全技能大赛开幕赛，西部赛区初赛启动仪式在四川大学望江校区体育馆正式拉开帷幕。…

2017/02/082017/02/08灯塔实验室Leave a comment 9106 views

SCADACS-面向工业控制系统的高交互蜜罐

本文由灯塔实验室翻译，为非官方中文译文，原文来自SCADACS团队《Towards Highly Intera…

2016/06/142016/06/14灯塔实验室Leave a comment 8276 views

针对网络空间关键基础设施情报收集的组织行为分析报告

本研究报告由灯塔实验室原创，转载请注明出处。点击下载本报告的PDF版本【PDF下载】一、背景随着Sho…

2016/04/072016/04/07灯塔实验室Leave a comment 7257 views

工控安全与国家安全

一部灵感来自于“震网Stuxnet”病毒事件的电影《骇客交锋》（原名“黑帽 Blackhat”），引发了人们对…

2016/03/292016/03/29Z-0neLeave a comment 5475 views

对西门子PLC CPU运行状态的一次全球监测统计

本文由灯塔实验室原创，转载请注明出处。关于西门子PLC的CPU运行状态我们曾在上周的文章中提到过，根据部署…

2016/03/092016/03/10灯塔实验室Leave a comment 16000 views

工业控制信息安全资源汇总（国内篇）

本文由灯塔实验室原创，转载请注明出处。一、概述工控安全被拉进公众视野，源于“震网”病毒在伊朗核电站的肆虐…

2015/02/272015/02/27Z-0neLeave a comment 5763 views

对GE PLC（美国通用电气产品）的一次全球统计报告（General Electric GE SRTP protocol Global Census Report）

概述 GE PLC来自全球领先的美国通用电气公司，GE PLC控制器从小型到大型有多个系列，如小型的Versa…

2015/02/062015/02/06Z-0neLeave a comment 5035 views

对欧姆龙设备的一次全球统计报告（Omron fins protocol Global Census Report）

概述欧姆龙是来自日本的知名电子和自控设备制造商，其中小型PLC在国内市场有较高的市场占有量，有CJ、CM等系…

2015/01/242015/01/24Z-0neLeave a comment 4670 views

加油站实时监测设备的一次全球统计报告（Tank Gauges Vulnerability Global Census Report)

概述在1月22日Rapid7博客发布了一份关于加油站液位仪（ATG，油罐液位仪，一种储油罐的监测设备）的研究…

ICS-CERT Advisory Feed

Fujifilm FCR Capsula X/Carbon X

This medical advisory includes mitigations for uncontrolled resource consumption and improper access control vulnerabilities reported in Fujifilm’s. . . read more Tue, 23 Apr 2019 12:05:43 EDT

Rockwell Automation MicroLogix 1400 and CompactLogix 5370 Controllers

This advisory includes mitigations for an open redirect vulnerability reported in Rockwell Automation’s MicroLogix 1400 and CompactLogix 5370 contro. . . read more Tue, 23 Apr 2019 12:00:33 EDT

Delta Industrial Automation CNCSoft

This advisory includes mitigations for heap-based buffer overflow, out-of-bounds read, and stack-based buffer overflow vulnerabilities reported in Del. . . read more Tue, 16 Apr 2019 10:10:11 EDT

WAGO Series 750-88x and 750-87x

This advisory includes mitigations for a use of hard-coded credentials vulnerability reported in WAGO's 750-88x and 750-87x programmable logic co. . . read more Tue, 16 Apr 2019 10:05:55 EDT

PLC Cycle Time Influences

This advisory includes mitigations for an uncontrolled resource consumption vulnerability reported in ABB, Phoenix Contact, Schneider Electric, Siemen. . . read more Tue, 16 Apr 2019 10:00:24 EDT

Siemens SIMOCODE pro V EIP

This advisory includes mitigations for an uncontrolled resource consumption vulnerability reported in Siemens' SIMOCODE pro V EIP low-voltage mot. . . read more Tue, 09 Apr 2019 10:25:33 EDT

Siemens Spectrum Power 4.7

This advisory includes mitigations for a command injection vulnerability reported in Siemens' Spectrum Power 4.7 system.. . . read more Tue, 09 Apr 2019 10:20:24 EDT

Siemens Industrial Products with OPC UA

This advisory includes mitigations for an uncaught exception vulnerability in Siemens' Industrial Products using OPS UA communications protocol.. . . read more Tue, 09 Apr 2019 10:15:11 EDT

Siemens SINEMA Remote Connect

This advisory includes mitigations for incorrect calculation of buffer size, out-of-bounds read, stack-based buffer overflow, and improper handling of. . . read more Tue, 09 Apr 2019 10:10:11 EDT

Siemens RUGGEDCOM ROX II

This advisory includes mitigations for double free, out-of-bounds read, and uncontrolled resource consumption vulnerabilities reported in Siemens'. . . read more Tue, 09 Apr 2019 10:05:16 EDT

Siemens CP, SIAMTIC, SIMOCODE, SINAMICS, SITOP, and TIM

This advisory includes mitigations for an out-of-bounds read vulnerability reported in Siemens' CP, SIAMTIC, SIMOCODE, SINAMICS, SITOP, and TIM p. . . read more Tue, 09 Apr 2019 10:00:56 EDT

Omron CX-Programmer

This advisory includes mitigations for a use after free vulnerability reported in Omron's CX-Programmer PLC software.. . . read more Thu, 04 Apr 2019 10:15:11 EDT

Rockwell Automation Stratix 5400/5410/5700 and ArmorStratix 5700

This advisory includes mitigations for an uncontrolled resource consumption vulnerability reported in Rockwell Automation's Stratix and ArmorStra. . . read more Thu, 04 Apr 2019 10:10:11 EDT

Rockwell Automation Stratix 5400/5410/5700/8000/8300 and ArmorStratix 5700

This advisory includes mitigations for resource management errors and improper input validation vulnerabilities reported in Rockwell Automation's. . . read more Thu, 04 Apr 2019 10:05:19 EDT

Rockwell Automation Stratix 5950

This advisory includes mitigations for an improper input validation vulnerability reported in Rockwell Automation's Stratix 5950 security applian. . . read more Thu, 04 Apr 2019 10:00:23 EDT

Advantech WebAccess/SCADA

This advisory includes mitigations for command injection, stack-based buffer overflow, and improper access control vulnerabilities reported in Advante. . . read more Tue, 02 Apr 2019 10:00:11 EDT

Rockwell Automation PowerFlex 525 AC Drives

This advisory includes mitigations for a resource exhaustion vulnerability reported in Rockwell Automation's PowerFlex 525 AC drive.. . . read more Thu, 28 Mar 2019 10:00:11 EDT

Siemens SCALANCE X

This advisory includes mitigations for an expected behavior violation vulnerability reported in the Siemens SCALANCE X products.. . . read more Tue, 26 Mar 2019 10:15:18 EDT

PHOENIX CONTACT RAD-80211-XD

This advisory includes mitigations for a command injection vulnerability reported in Phoenix Contact's RAD-80211-XD WLAN wireless transceiver.. . . read more Tue, 26 Mar 2019 10:10:11 EDT

ENTTEC Lighting Controllers

This advisory includes mitigations for a missing authentication for critical function vulnerability reported in ENTTEC’s lighting controllers.. . . read more Tue, 26 Mar 2019 10:00:23 EDT