Showing 1 - 6 of 6

Files from Eyal Udassin

Email address	eyal.udassin at c4-security.com
First Active	2008-01-26
Last Active	2010-01-16

AB Micrologix Denial Of Service / Unauthorized Access: Posted Jan 16, 2010; Authored by Eyal Udassin | Site c4-security.com; Micrologix 1100 and 1400 controllers suffer from multiple vulnerabilities that allow unauthorized control of the PLC. Details of these vulnerabilities will be disclosed only to legitimate parties such as asset owners (utilities), after receiving the approval of the local CERT or any other local official entity.; tags | advisory, local, vulnerability; SHA-256 | 488ad569c5cecbf68d458ed4c08071d485ed70de51bbe59a8bd1260aa745c3cb; Download | Favorite | View

PI SystemT Encryption Weakness: Posted Sep 30, 2009; Authored by Eyal Udassin | Site c4-security.com; PI SystemT suffers from an encryption weakness in the default authentication process.; tags | advisory; SHA-256 | 66760cfdf156bb7fea9d0c1b3a2301e13f6007d57c16f6ac806c780ea156375c; Download | Favorite | View

E-TerraHabitat Privilege Escalation / DoS: Posted Feb 5, 2009; Authored by Eyal Udassin, Jonathan Afek | Site c4-security.com; C4 SCADA Security Advisory - Areva T+D E-TerraHabitat and E-TerraPlatform solutions suffer from denial of service and privilege escalation vulnerabilities.; tags | exploit, denial of service, vulnerability; advisories | CVE-2009-0211, CVE-2009-0212, CVE-2009-0213, CVE-2009-0214; SHA-256 | 313222dd8a72c861545fb4fffdbb7ca944ab74de61117f8bcd90eb111c777005; Download | Favorite | View

proficy-harvest.txt: Posted Jan 26, 2008; Authored by Eyal Udassin | Site c4-security.com; Proficy Information Portal version 2.6 passes a user's password base64 encoded on the wire, allowing for it to be easily intercepted and decoded.; tags | advisory; advisories | CVE-2008-0174; SHA-256 | 193987184fe40b9994e6689d7dd2c17f6e7439290c4cec09274c18a66ec26f1d; Download | Favorite | View

proficy-upload.txt: Posted Jan 26, 2008; Authored by Eyal Udassin | Site c4-security.com; Proficy Information Portal version 2.6 has a flaw that allows an authenticated attacker the ability to upload arbitrary code on the server.; tags | advisory, arbitrary, file upload; advisories | CVE-2008-0175; SHA-256 | 8fe8e4b4c25860812b02f54a0cb017e1b4fc3b6c4390039ca199adb32e1f2f6b; Download | Favorite | View

cimplicity-heap.txt: Posted Jan 26, 2008; Authored by Eyal Udassin, Gilad Bakas | Site c4-security.com; Cimplicity HMI version 6.1, 6.1 SP5, and 6.1 SP6 all suffer from an exploitable heap overflow vulnerability.; tags | advisory, overflow; advisories | CVE-2008-0176; SHA-256 | ca32e6e16dfac1360f0eada284bc6fe1d217d79e79aab976e43fe12f5359abb4; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days