CVE-2014-8652

Elipse E3 <3 - DoS

Title source: llm

Description

Elipse E3 3.x and earlier allows remote attackers to cause a denial of service (application crash and plant outage) via a rapid series of HTTP requests to index.html on TCP port 1681.

Exploits (1)

exploitdb WORKING POC

by firebitsbr · godoswindows

https://www.exploit-db.com/exploits/35379

View Code ZIP pw:eip

References (2)

[Exploit] http://firebitsbr.wordpress.com/2014/07/16/vsla-security-advisory-fire-scada-dos-2013-001-http-dos-requests-flooding-crash-device-vulnerabilities-elipse-e3-scada-plc/

[Mailing List] http://seclists.org/fulldisclosure/2014/Jul/69

Scores

EPSS 0.1378

EPSS Percentile 94.1%

Classification

CWE

CWE-16

Status draft

Affected Products (1)

elipse/e3 < 3.2

Timeline

Published Nov 10, 2014

Tracked Since Feb 18, 2026