Sign-up

ID

VAR-201209-0286


CVE

CVE-2012-5049


TITLE

Optimalog Optima PLC of APIFTP Server Service disruption in ( infinite loop ) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2012-004651

DESCRIPTION

APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed packet. Optima is software that controls the PLC via the SCADA/HMI interface. The APIFTP server is a file server. Optima PLC is prone to multiple remote denial-of-service vulnerabilities. Successful exploit of these issues allows an attacker to cause the affected application to crash or enter an endless loop, denying service to legitimate users. ---------------------------------------------------------------------- The final version of the CSI 6.0 has been released. Find out why this is not just another Patch Management solution: http://secunia.com/blog/325/ ---------------------------------------------------------------------- TITLE: EOScada Information Disclosure and Denial of Service Vulnerabilities SECUNIA ADVISORY ID: SA51171 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/51171/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=51171 RELEASE DATE: 2012-11-02 DISCUSS ADVISORY: http://secunia.com/advisories/51171/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/51171/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=51171 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: Multiple vulnerabilities have been reported in EOScada, which can be exploited by malicious people to disclose potentially sensitive information and cause a DoS (Denial of Service). 1) An error in "EOS Core Scada.exe" when processing certain data can be exploited to cause a crash via random data sent to TCP port 5050 or 24004. 2) An error in EOSDataServer.exe when processing certain data can be exploited to cause a resource management error via large amount of data sent to TCP port 24006. 3) An error in eosfailoverservice.exe when processing certain data can be exploited to cause a resource management error via large amount of data sent to TCP port 12000. 4) An error in eosfailoverservice.exe can be exploited to cause the service to return unspecified data in clear text. SOLUTION: Update to version 11.0.19.2. PROVIDED AND/OR DISCOVERED BY: ICS-CERT credits Dale Peterson, Digital Bond. ORIGINAL ADVISORY: ICS-CERT: http://www.us-cert.gov/control_systems/pdf/ICSA-12-271-01.pdf OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.7

sources: NVD: CVE-2012-5049 // JVNDB: JVNDB-2012-004651 // CNVD: CNVD-2012-5496 // BID: 55712 // IVD: 5797167e-2353-11e6-abef-000c29c66e3d // PACKETSTORM: 117857

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.8

sources: IVD: 5797167e-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-5496

AFFECTED PRODUCTS

vendor:optimalogmodel:optima plcscope:lteversion:1.5.2

Trust: 1.8

vendor:optimalogmodel:optima plcscope:eqversion:1.5.1

Trust: 1.6

vendor:optimalogmodel:optima plcscope:eqversion:1.5.0

Trust: 1.6

vendor:optimalogmodel:optima plcscope:eqversion:1.4.9

Trust: 1.6

vendor:optimalogmodel:optima plcscope:eqversion:1.4.10

Trust: 1.6

vendor:optimalogmodel:optima plcscope:eqversion:1.5.2

Trust: 1.2

vendor:optima plcmodel: - scope:eqversion:1.4.9

Trust: 0.2

vendor:optima plcmodel: - scope:eqversion:1.4.10

Trust: 0.2

vendor:optima plcmodel: - scope:eqversion:1.5.0

Trust: 0.2

vendor:optima plcmodel: - scope:eqversion:1.5.1

Trust: 0.2

vendor:optima plcmodel: - scope:eqversion:*

Trust: 0.2

sources: IVD: 5797167e-2353-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-5496 // JVNDB: JVNDB-2012-004651 // CNNVD: CNNVD-201209-703 // NVD: CVE-2012-5049

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2012-5049
value: HIGH

Trust: 1.0

NVD: CVE-2012-5049
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201209-703
value: HIGH

Trust: 0.6

IVD: 5797167e-2353-11e6-abef-000c29c66e3d
value: HIGH

Trust: 0.2

nvd@nist.gov: CVE-2012-5049
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

IVD: 5797167e-2353-11e6-abef-000c29c66e3d
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.9 [IVD]

Trust: 0.2

sources: IVD: 5797167e-2353-11e6-abef-000c29c66e3d // JVNDB: JVNDB-2012-004651 // CNNVD: CNNVD-201209-703 // NVD: CVE-2012-5049

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.8

sources: JVNDB: JVNDB-2012-004651 // NVD: CVE-2012-5049

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201209-703

TYPE

Input validation

Trust: 0.8

sources: IVD: 5797167e-2353-11e6-abef-000c29c66e3d // CNNVD: CNNVD-201209-703

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2012-004651

PATCH
title:Top Pageurl:http://www.optimalog.com/home.html
Trust: 0.8
title:Patch for OPTIMA PLC Infinite Loop Denial of Service Vulnerabilityurl:https://www.cnvd.org.cn/patchInfo/show/23351
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2012-5496 // 
            
            
            
            JVNDB: JVNDB-2012-004651

EXTERNAL IDS
db:NVDid:CVE-2012-5049
Trust: 3.5
db:ICS CERTid:ICSA-12-271-02
Trust: 2.4
db:BIDid:55712
Trust: 1.9
db:CNVDid:CNVD-2012-5496
Trust: 0.8
db:CNNVDid:CNNVD-201209-703
Trust: 0.8
db:JVNDBid:JVNDB-2012-004651
Trust: 0.8
db:ICS CERTid:ICSA-12-271-01
Trust: 0.7
db:NSFOCUSid:20891
Trust: 0.6
db:IVDid:5797167E-2353-11E6-ABEF-000C29C66E3D
Trust: 0.2
db:SECUNIAid:51171
Trust: 0.2
db:PACKETSTORMid:117857
Trust: 0.1
sources:
            
            
            IVD: 5797167e-2353-11e6-abef-000c29c66e3d // 
            
            
            
            CNVD: CNVD-2012-5496 // 
            
            
            
            BID: 55712 // 
            
            
            
            JVNDB: JVNDB-2012-004651 // 
            
            
            
            PACKETSTORM: 117857 // 
            
            
            
            CNNVD: CNNVD-201209-703 // 
            
            
            
            NVD: CVE-2012-5049

REFERENCES
url:http://www.us-cert.gov/control_systems/pdf/icsa-12-271-02.pdf
Trust: 2.4
url:http://www.securityfocus.com/bid/55712
Trust: 1.6
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-5049
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-5049
Trust: 0.8
url:http://www.us-cert.gov/control_systems/pdf/icsa-12-271-01.pdf
Trust: 0.7
url:http://www.nsfocus.net/vulndb/20891
Trust: 0.6
url:http://www.optimalog.com/home.html
Trust: 0.3
url:http://secunia.com/advisories/51171/
Trust: 0.1
url:https://ca.secunia.com/?page=viewadvisory&vuln_id=51171
Trust: 0.1
url:http://secunia.com/vulnerability_intelligence/
Trust: 0.1
url:http://secunia.com/advisories/secunia_security_advisories/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
Trust: 0.1
url:http://secunia.com/advisories/about_secunia_advisories/
Trust: 0.1
url:http://secunia.com/advisories/51171/#comments
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/personal/
Trust: 0.1
url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Trust: 0.1
url:http://secunia.com/blog/325/
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2012-5496 // 
            
            
            
            BID: 55712 // 
            
            
            
            JVNDB: JVNDB-2012-004651 // 
            
            
            
            PACKETSTORM: 117857 // 
            
            
            
            CNNVD: CNNVD-201209-703 // 
            
            
            
            NVD: CVE-2012-5049

CREDITS
Luigi Auriemma
Trust: 0.9
sources:
            
            
            BID: 55712 // 
            
            
            
            CNNVD: CNNVD-201209-703

SOURCES
db:IVDid:5797167e-2353-11e6-abef-000c29c66e3d
db:CNVDid:CNVD-2012-5496
db:BIDid:55712
db:JVNDBid:JVNDB-2012-004651
db:PACKETSTORMid:117857
db:CNNVDid:CNNVD-201209-703
db:NVDid:CVE-2012-5049

LAST UPDATE DATE
2025-04-11T22:56:05.105000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2012-5496date:2012-10-08T00:00:00
db:BIDid:55712date:2012-09-27T00:00:00
db:JVNDBid:JVNDB-2012-004651date:2012-10-01T00:00:00
db:CNNVDid:CNNVD-201209-703date:2012-09-29T00:00:00
db:NVDid:CVE-2012-5049date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:IVDid:5797167e-2353-11e6-abef-000c29c66e3ddate:2012-10-08T00:00:00
db:CNVDid:CNVD-2012-5496date:2012-10-08T00:00:00
db:BIDid:55712date:2012-09-27T00:00:00
db:JVNDBid:JVNDB-2012-004651date:2012-10-01T00:00:00
db:PACKETSTORMid:117857date:2012-11-03T09:32:28
db:CNNVDid:CNNVD-201209-703date:2012-09-29T00:00:00
db:NVDid:CVE-2012-5049date:2012-09-28T10:40:22.537