Vulnerability Notes

From SCADApedia

This page includes all US-CERT issued Vulnerability Notes. Additional SCADApedia information is available for each Vulnerability Note on this page.

Citect

• CitectSCADA Stack Overflow Vulnerability (11 Jun 2008)

GE Fanuc

• GE Fanuc Cimplicity Heap Buffer Overflow (24 Jan 2008)
• GE Fanuc Proficy Arbitrary File Upload And Execution (24 Jan 2008)
• GE Fanuc Proficy Plaintext Password Vulnerability (24 Jan 2008)

Gesytec

• Gesytec Easylon OPC Server fails to properly validate OPC server handles (14 Dec 2007)

ICONICS

• ICONICS Dialog Wrapper Module ActiveX control vulnerable to buffer overflow (2 Jan 2007)

LiveData

• ICCP Server heap buffer overflow vulnerability (16 May 2006)
• ICCP Server COTP vulnerability (2 May 2007)
• ICCP Server HTTP/SOAP Heap Overflow Vulnerability (2 May 2007)

NETxAutomation

• NETxEIB OPC Server fails to properly validate OPC server handles (22 Mar 2007)

SISCO

• OSI stack fails to properly validate packets (20 Sep 2006)
• OSI stack fails to properly handle malformed packets (17 Jan 2007)

Takebishi Electric

• Takebishi DeviceXPlorer OPC Server fails to properly validate OPC server handles (19 Mar 2007)

Wonderware

• Wonderware InTouch insecure NetDDE share (25 Jan 2008)
• Invensys Wonderware SuiteLink Denial of Service (5 May 2008)