Resources

Research


Rockwell Automation (Allen Bradley) Multiple Vulnerabilities
Multiple vulnerabilities allowan attacker to gain full control over any Micrologix 1100 and 1400 RTU. For additional details, click here.

OSISoft PI Server Vulnerability
A vulnerability in the authentication process of PI Server allows an attacker to compromise the login credentials for the server. For additional details, click here.

AREVA e-terrahabitat Multiple Vulnerabilities
Multiple vulnerabilities which may lead to denial of service of the SCADA system or unauthorized access were found in AREVA e-terrahabitat. For additional details, click here.

ABB PCU400 Vulnerability
A buffer overflow which allows an attacker to compromise the ABB PCU400 FEP (Communication server) was identified, and an exploit was successfully implemented. For additional details, click here.

GE Fanuc Cimplicity Vulnerability
A heap overflow which allows an attacker to compromise the control center server and operator workstations was identified, and an exploit was successfully implemented. For additional details, click here.

Proficy Information Portal Vulnerability
An application level vulnerability allows an attacker to upload and execute his code on GE-Fanuc's reporting server, which commonly connects the control and corporate networks. For additional details, click here.

Whitepapers:


Smart Grid Security Whitepaper
The Dark Side of the Smart Grid - Smart Meters (in)Security

SCADA Security Scientific Symposium (S4) Whitepaper
Control System Attack Vectors and Examples: Field Site and Corporate Network

SyScan08 Presentation
SCADA Security - Generic Electric Grid Malware Design

Homeland Security
Services for the SCADA/Military market


Profiles & Brochures

Download Fides Brochure

Download TrojanID Brochure