medium5.0Public exploit code
CVE-2014-8652
Elipse E3 3.x and earlier allows remote attackers to cause a denial of service (application crash and plant outage) via a rapid series of HTTP requests to inde…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Elipse E3 - HTTP Denial of Service2014-11-26 · dos · windows
Impact
Elipse E3 3.x and earlier allows remote attackers to cause a denial of service (application crash and plant outage) via a rapid series of HTTP requests to index.html on TCP port 1681.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elipse | E3 | through 3.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://firebitsbr.wordpress.com/2014/07/16/vsla-security-advisory-fire-scada-dos-2013-001-http-dos-requests-flooding-crash-device-vulnerabilities-elipse-e3-scada-plc/
- http://seclists.org/fulldisclosure/2014/Jul/69
- http://firebitsbr.wordpress.com/2014/07/16/vsla-security-advisory-fire-scada-dos-2013-001-http-dos-requests-flooding-crash-device-vulnerabilities-elipse-e3-scada-plc/
- http://seclists.org/fulldisclosure/2014/Jul/69