[Canvas] SCADA+ 1.62 and DefPack 1.15 are out

Yuriy Gurkin audit at gleg.net
Tue Jan 24 07:19:46 EST 2017


Hi, List,

1.62 ver. of SCADA+ contains 3 0-days. List:

- DataNet OPC HTTP Server Directory Traversal Vulnerability 0-Day
- DAQFactory <= 5.91  Remote Denial Of Service Exploit 0-Day
- Panasonic Configurator DL DoS PoC 0-Day

1.15 DefPack contains 2 modules. List:

- Fortigate OS Version 4.x < 5.0.7 allows remote attackers to obtain
administrative access by entering an unspecified password during SSH
- PLC Wireless Router GPN2.4P21-C-CN Arbitrary File Disclosure. For example
this module get /etc/password from router

Happy pentesting,
Gleg`s Security team <http://gleg.net>
Follow us on Twitter: GlegExploitPack <https://twitter.com/GlegExploitPack>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.immunityinc.com/pipermail/canvas/attachments/20170124/fbb8ef99/attachment.html>


More information about the Canvas mailing list