SCADA Strangelove or: How I Learned to Start Worrying and Love Nuclear Plants

Our submission accepted @_defcon_. Special thanks to Nikita Kronenberg for write-up.

Talk: https://www.defcon.org/html/defcon-20/dc-20-speakers.html#Gordeychik

Schedule: https://www.defcon.org/html/defcon-20/dc-20-schedule.html#sundayspeakers

Special release for Def Con guys:

SCADA Strangelove or: How I Learned to Start Worrying and Love Nuclear Plants

SERGEY GORDEYCHIK
DENIS BARANOV
GLEB GRITSAI

SSA-223158 : Multiple Security Vulnerabilities in WinCC 7.0 SP3

Our first release:

- X-Path Injection in WinCC DiagAgent and WebNavigator
- Directory Traversal in WinCC DiagAgent and WebNavigator
- Buffer overflow ain WinCC DiagAgent web server
- Reflected Cross-Site Scripting in  WinCC DiagAgent and WebNavigator


(CVE-2012-2596)  (CVE-2012-2597) (CVE-2012-2598) (CVE-2012-2595)  (CVE-2012-3003)




Enjoy.

Our Mission

to save Humanity from industrial disaster and to keep Purity Of Essence