Tuesday, September 17, 2013

Gleg releases Ver 1.27 of the SCADA+ Exploit Pack for Immunity Canvas

Like clockwork, Gleg announced on September 6 the release of version 1.27 of the SCADA+ Exploit Pack for the Immunity Canvas framework.

A summary of recent releases includes:
  • Version 1.26 was released on August 14, 2013
  • Version 1.25 was released on July 5, 2013
  • Version 1.24 was released on May 14, 2013
  • Version 1.23 was released on April 22, 2013
  • Version 1.22 was released on February 27, 2013
  • Version 1.21 was released on February 7, 2013
  • Version 1.20 was released on December 21, 2012
  • Version 1.19 was released on November 8, 2012
SCADA+ 1.27 includes 3 new SCADA related vulnerabilities; none of them are 0-days.

SCADA+ 1.27 modules include:
  • pwStore Denial of Service
  • 3S CODESYS Gateway-Server <= 2.3.9.27 Directory Traversal Vulnerability
  • Two modules for different National Instruments LabWindows/CVI, LabVIEW, and other products ActiveXes
The Codesys vulnerability appears to contain one of the vulnerabilities communicated in ICS-CERT Advisory ICSA-13-050-01A originally disclosed by Aaron Portnoy of Exodus Intelligence and published on February 19, 2013 with an update on March 27, 2013. This exploit module has already been posted for the Metasploit Framework in the open source community. Note that this exploit targets the Gateway Server and is different than the other CODESYS vulnerability disclosed during the same time that targeted the runtime system.

Additional details and references can be found for this exploit module included in the SCADA+ pack:
Information on the Gleg SCADA+ Exploit Pack can be found here, as well as information on Immunity's CANVAS here.

As always, please post your comments or suggestions to improve the usefulness of this information.
Posted by Joel Langill at 10:45 AM

1 comment:

  1. HALIKJanuary 3, 2020 at 9:47 PM

    thousand of the peoples of philppines are trying for the search of pinoy tv shows. they can not get any updates on time for this they become anxious. now this man make a good web of pinoy tv shows. here we all can get all updates of philppines dramas shows or any serial. every thing is updated on time and in full hd formate. i also observe this. i am also sending this on a social network on facebook , twitter , tumbler , pintrest etc. here you can also get the updates of pinoy recepies. now go here and watch this web and share this.
    pinoy teleserye online

    ReplyDelete

Subscribe to: Post Comments (Atom)