AzeoTech DAQFactory before 5.85 (Build 1842) does not perform authentication for certain signals, which allows remote attackers to cause a denial of service (system reboot or shutdown) via a signal.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Link | Tags |
---|---|
http://www.us-cert.gov/control_systems/pdf/ICSA-11-122-01.pdf | us government resource |
http://www.azeotech.com/revisionhistory.php |