All your PLC are belong to us (2)
scadastrangelove <[email protected]> Wed, 19 Mar 2014 10:44:53 +0400
| Newsgroups | gmane.comp.security.full-disclosure |
|---|---|
| Message-ID | <CAJ+7+cCK0gAP_g0BOAmSXjyH3YkDQgeg6dfpv9nUgY2n_-uSpg@mail.gmail.com> |
--===============0133959544== Content-Type: multipart/alternative; boundary=089e015368ce7998e704f4effd14 --089e015368ce7998e704f4effd14 Content-Type: text/plain; charset=ISO-8859-1 Fixes for Siemens S7 1500 PLC are published. Thanks to Yury Goltsev <https://twitter.com/ygoltsev>, Ilya Karpov, Alexey Osipov <https://twitter.com/GiftsUngiven>, Dmitry Serebryannikov<https://twitter.com/dsrbr>and Alex Timorin <https://twitter.com/atimorin>. There are a lot of, but Authentication bypass (INSUFFICIENT ENTROPY/CVE-2014-2251) is the best. Links: http://scadastrangelove.blogspot.com/2014/03/all-your-plc-are-belong-to-us-2.html More details are pending. Regards, SCADA StrangeLove team --089e015368ce7998e704f4effd14 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div><div><div>Fixes for Siemens S7 1500 PLC are published= .<br> Thanks to <a href=3D"https://twitter.com/ygoltsev">Yury Goltsev</a>, Ilya K= arpov, <a href=3D"https://twitter.com/GiftsUngiven">Alexey Osipov</a>, <a h= ref=3D"https://twitter.com/dsrbr">Dmitry Serebryannikov</a> and <a href=3D"= https://twitter.com/atimorin">Alex Timorin</a>.<br> There are a lot of, but Authentication bypass=20 (INSUFFICIENT ENTROPY/CVE-2014-2251) is the best.<br><br></div><div>Links: = <a href=3D"http://scadastrangelove.blogspot.com/2014/03/all-your-plc-are-be= long-to-us-2.html ">http://scadastrangelove.blogspot.com/2014/03/all-your-p= lc-are-belong-to-us-2.html </a><br> </div><div><br></div>More details are pending.<br><br></div>Regards,<br></d= iv>SCADA StrangeLove team <br></div> --089e015368ce7998e704f4effd14-- --===============0133959544== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/ --===============0133959544==--