Vulnerabilities in trading and SCADA softwares

[Luigi Auriemma <aluigi@xxxxxxxxxxxxx>]

Considering the current financial and global crysis in which we are
fallen I thought that was enough "funny" to give a quick look at two
particular types of softwares: technical analysis (trading) and SCADA.

The tests have been performed as fast as possible without going deep in
the softwares and spending just some minutes for the majority of the
bugs... a quick disinterested test and nothing else.

The technical analysis softwares are used in the financial and trading
sectors for studying the trend of the market and catching the right
moment to buy and sell for having a profit:

  MetaStock
    http://aluigi.org/adv/metastock_1-adv.txt

  eSignal
    http://aluigi.org/adv/esignal_1-adv.txt

While for the HMI/SCADA, automation and industrial sectors I opted for
some medium/small products:

  Cogent DataHub
    http://aluigi.org/adv/cogent_1-adv.txt
    http://aluigi.org/adv/cogent_2-adv.txt
    http://aluigi.org/adv/cogent_3-adv.txt
    http://aluigi.org/adv/cogent_4-adv.txt

  DAQFactory
    http://aluigi.org/adv/daqfactory_1-adv.txt

  Progea Movicon / PowerHMI
    http://aluigi.org/adv/movicon_1-adv.txt
    http://aluigi.org/adv/movicon_2-adv.txt
    http://aluigi.org/adv/movicon_3-adv.txt

  Carel PlantVisor
    http://aluigi.org/adv/plantvisor_1-adv.txt

  Rockwell RSLogix (DoS only)
    http://aluigi.org/adv/rslogix_1-adv.txt

  Measuresoft ScadaPro (multiple vulnerabilities)
    http://aluigi.org/adv/scadapro_1-adv.txt

  Beckhoff TwinCAT (DoS only)
    http://aluigi.org/adv/twincat_1-adv.txt

  BroadWin WebAccess Client (released over one week ago)
    http://aluigi.org/adv/bwocxrun_1-adv.txt

As already said I performed only a superficial test without wasting time
configuring the softwares or reading manuals and without doing other
checks or analysis so I hope everything is correct although not much
detailed.

If there will be enough interest in these sectors I will release new
vulnerabilities in the next weeks.


--- 
Luigi Auriemma
http://aluigi.org