Two vulnerabilities have been reported in zenon, which can be exploited by malicious people to potentially compromise a vulnerable system.

1) An error in zenAdminSrv.exe when processing certain packets can be exploited via a specially crafted packet sent to TCP port 50777.

2) An error in ZenSysSrv.exe when handling client connections can be exploited by connecting and disconnecting multiple times on TCP port 1101.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code.

The vulnerabilities are reported in version 6.51 SP0.

Solution
Reportedly a patch has been released. Contact the vendor for further information.

Provided and/or discovered by
ICS-CERT credits Kuang-Chun Hung, Security Research and Service Institute Information and Communication Security Technology Center (ICST).

Original Advisory
ICS-CERT:
http://www.us-cert.gov/control_systems/pdf/ICSA-12-013-01.pdf

Deep Links
Links available in Customer Area