本文由灯塔实验室翻译，为非官方中文译文，原文来自SCADACS团队《Towards Highly Intera…
本文由灯塔实验室原创，转载请注明出处。 关于西门子PLC的CPU运行状态 我们曾在上周的文章中提到过，根据部署…
本文由灯塔实验室原创，转载请注明出处。 说到本文的起因是源于我们部署在公网的一个针对西门子PLC S7协议（S…
简介 在西门子S7系列PLC中，用户在通过STEP7以及TIA Portal软件定义的PLC一些功能，在PLC…
简介 如今针对互联网的探测性扫描越发增多，暴露在公网的PLC、嵌入式设备等作为互联网的一部分，也会因为一些识别…
This advisory was originally posted to the NCCIC Portal on June 1, 2017, and is being released to the NCCIC/ICS-CERT web site. This advisory contains mitigation details for stack-based buffer overflow and improper certificate validation vulnerabilities in the NXP i.MX Product Family.. . . read more Tue, 25 Jul 2017 10:00:38 EDT
This advisory contains mitigation details for information exposure, cross-site request forgery, improper neutralization of expression, and improper validation of certificate expiration vulnerabilities in Schneider Electric’s PowerSCADA Anywhere and Citect Anywhere.. . . read more Thu, 20 Jul 2017 10:00:21 EDT
This advisory was originally posted to the NCCIC Portal on May 18, 2017, and is being released to the NCCIC/ICS-CERT web site. This advisory contains mitigation details for an improper input validation vulnerability in the Rockwell Automation MicroLogix 1100 Controllers.. . . read more Tue, 18 Jul 2017 10:00:25 EDT
This advisory contains mitigation details for improper authentication, improper privilege management, channel accessible by non-endpoint, and storing passwords in a recoverable format vulnerabilities in the Siemens SiPass integrated access control system.. . . read more Thu, 13 Jul 2017 10:10:36 EDT
This advisory contains mitigation details for man-in-the-middle and authentication bypass using an alternate path or channel vulnerabilities in the Siemens SIMATIC [email protected] Android App.. . . read more Thu, 13 Jul 2017 10:00:57 EDT
This advisory contains mitigation details for an out-of-bounds write vulnerability in the Siemens SIMATIC Logon.. . . read more Tue, 11 Jul 2017 10:25:53 EDT
This advisory contains mitigation details for an improper restriction of operations within the bounds of a memory buffer vulnerability in the Fuji Electric V-Server.. . . read more Tue, 11 Jul 2017 10:20:10 EDT
This advisory contains mitigation details for improper authentication and permissions, privileges, and access controls vulnerabilities in ABB’s VSN300 Wi-Fi Logger Card.. . . read more Tue, 11 Jul 2017 10:15:06 EDT
This advisory contains mitigation details for a cross-site request forgery vulnerability in OSIsoft’s PI Coresight 2016 R2 and earlier versions.. . . read more Tue, 11 Jul 2017 10:10:56 EDT
This advisory contains mitigation details for vulnerabilities in third party components used by OSIsoft's PI ProcessBook 2015 R2 (3.6.0) and earlier versions and PI ActiveView 2015 R2 (3.6.0) and earlier versions.. . . read more Tue, 11 Jul 2017 10:05:49 EDT
This advisory contains mitigation details for an improper access control vulnerability in the Schweitzer Engineering Laboratories, Inc. SEL-3620 and SEL-3622.. . . read more Tue, 11 Jul 2017 10:00:34 EDT
This advisory contains mitigation details for missing authentication vulnerabilities in the Siemens OZW672 and OZW772 devices.. . . read more Thu, 06 Jul 2017 10:20:39 EDT
This advisory contains mitigation details for missing authorization, improper input validation, and improper authentication vulnerabilities in the Siemens Reyrolle integration, control, measurement, and automation products.. . . read more Thu, 06 Jul 2017 10:15:46 EDT
This updated advisory is a follow-up to the original advisory titled ICSA-17-187-03 Siemens SIPROTEC 4 and SIPROTEC Compact that was published July 6, 2017, on the NCCIC/ICS-CERT web site. This updated advisory contains mitigation details for improper input validation, missing authorization, and improper authentication vulnerabilities in the Siemens SIPROTEC 4 and SIPROTEC Compact devices.. . . read more Thu, 06 Jul 2017 10:10:10 EDT
This advisory contains mitigation details for stack-based buffer overflow, uncontrolled resource consumption, and null pointer deference vulnerabilities in Schneider Electric’s Wonderware ArchestrA Logger.. . . read more Thu, 06 Jul 2017 10:05:44 EDT
This advisory contains mitigation details for cleartext transmission of sensitive information and inadequate encryption strength vulnerabilities in Schneider Electric’s Ampla MES.. . . read more Thu, 06 Jul 2017 10:00:03 EDT
This updated advisory is a follow-up to the original advisory titled ICSA-17-180-01 Siemens Industrial Products using Intel Processors that was published June 29, 2017, on the NCCIC/ICS-CERT web site. This updated advisory contains mitigation details for a permissions, privileges, and access controls vulnerability that affects Siemens Industrial products which use Intel processors.. . . read more Thu, 29 Jun 2017 10:10:00 EDT
This advisory contains mitigation details for SQL injection, path traversal, improper authentication, use of hard-coded password, improper access control, denial of service, and information disclosure vulnerabilities in Schneider Electric’s U.motion Builder.. . . read more Thu, 29 Jun 2017 10:05:00 EDT
This advisory contains mitigation details for an improper authentication vulnerability in the Siemens Viewport for Web Office Portal.. . . read more Thu, 29 Jun 2017 10:00:10 EDT
This advisory contains mitigation details for an improper authentication vulnerability in the Newport XPS-Cx and XPS-Qx controllers.. . . read more Tue, 27 Jun 2017 10:00:29 EDT