Vulnerability in multiple Triangle MicroWorks’ products

The Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) reported on August 28, 2013 the following vulnerability:

Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation vulnerability in multiple Triangle MicroWorks’ products and third‑party components. Triangle MicroWorks has produced an update that mitigates this vulnerability. Adam Crain has tested the update to validate that it resolves the vulnerability.

This vulnerability could be exploited remotely.

The following Triangle MicroWorks products are affected:

• SCADA Data Gateway, v2.50.0309 through v3.00.0616
• DNP3 .NET Protocol components, v3.06.0.171 through v3.15.0.369
• DNP3 ANSI C source code libraries, v3.06.0000 through v3.15.0000

Click HERE to access the complete report.

IEC 61850 at the Remote Conference in Denver (September 18-19, 2012)

IEC 61850 was one of the highlights at the 2012 Remote Conference and Exhibition in Denver (CO) on September 18-19, 2012.

NettedAutomation conducted a Seminar on IEC 61850 and IEC 61400-25 and presented solutions for a short-time-to-market development.

Dan Nordell (a long-term utility expert and UCA expert from day one) explained to many experts that came by at the booth, what the benefits of the standards are:

The many discussions during the seminar and at the booth reviled the growing interest in IEC 61850 and IEC 61400-25 in the USA. Several vendors of RTU and SCADA solutions, and utility experts reported that they are in the process of making decisions on how to get standard to implement or apply conformant solutions implemented in the near future.

Many open positions in the USA are requesting – one or the other way – knowledge with regard to IEC 61850.

How are you planning to get the needed knowledge on IEC 61850, IEC 61400-25 and MMS (ISO 9506)? Contact NettedAutomation to get the right support.

C# Server and Client Application Source Code for IEC 61850 DLL

NettedAutomation has updated the C# Client AND SERVER application (GUI) of the IEC 61850 Evaluation Kit (DLL). You can use the SystemCorp DLL (dated back to 2010) from the evaluation package downloaded from the above NettedAutomation link. If you have installed the IEC 61850 DLL before March 2012 it will not run anymore on your PC (it runs for 6 just months). In that case you can install it on a different machine – maybe you have a new PC anyway since you tested the DLL.

The C# application source code and executable code as well as documentation and the appropriate SCL files for the client and the server are provided via the link below.

The new Server GUI supports manipulating values in the server application, e.g., the temperature and setting for temperature alarms at the server:

The client application allows to see results from polling and Reports:

You may just use another browser (e.g., the Omicron IEDScout) to connect to the server and retrieve the model and the values:

Download the complete C# application examples for the IEC 61850 DLL [zipped file, 1 MB].

Details on downloading the DLL evaluation package could be found here.

Libraries – New License Policy for IEC 61850 Stack and API from SystemCorp

SystemCORP Embedded Technology Pty Ltd (Bentley WA 6102, Australia) offers a very modern and brand-new license policy for precompiled Libraries (Windows and Linux) for IEC 61850 Source code for their Stack and API effective August 2012 meeting the market demands.

The prices depend on the number of signals implemented: 1-100, 101-500, 501-1500, 1501-5000, 5000+

There are two options to chose from:

1. End User Server/Client (Windows and Linux); based on quantities
2. Re‐distributable Server/Client (Windows and Linux); royalty free with application

They offer the following services:

Built in Server & Client Function (based on ICD/CID configuration file)
‐ Reporting (buffered and unbufferd)
‐ MMS Services
‐ GOOSE Publisher (Server) and Subscriber (Client)
‐ Logging (Custom XML file format)(**)
‐ Application Programming Interface (API) manual published on
http://www.systemcorp.com.au/PIS10API/index.html

In addition to the new pricing it is also crucial to understand that the package comes with a build-in API that can be used by the application software immediately.

Most of the needed definitions in edition 2 of the core documents (7-2, 7-3, 7-4, 8-1 and 6) have been implemented. Most Object models (LN, DO) of other standards like IEC 61400-25-2 (Wind Turbines) can easily be implemented using the corresponding models in the CID file.

Contact SystemCorp by email for a quote.

Note also the new prices for the IEC 61850 source code.

New Source Code License Policy for IEC 61850 Stack and API from SystemCorp

SystemCORP Embedded Technology Pty Ltd (Bentley WA 6102, Australia) offers a brand-new license policy for IEC 61850 Source code for their Stack and API effective August 2012 meeting the market demands. The new policy is extremely suitable for manufacturers that plan to implement IEC 61850 into more than one product.

They offer the following easy to understand options:

1. Portable Server AND Client IEC 61850 Stack and API Source Code
   License for one (1) product
2. Extension License for Portable Server AND Client Stack and API Source Code License for an additional product
3. Unlimited Company Wide Portable Client AND Server IEC 61850 Stack and API Source Code License
4. Annual Service and Maintenance Contract

License fees stated under item 1, 2 and 3 are one off costs. No other license fees or royalties for re-distribution of customer products apply.

In addition to the new pricing it is also crucial to understand that the package comes with a build-in API that can be used by the application software immediately.

Most of the needed definitions in edition 2 of the core documents (7-2, 7-3, 7-4, 8-1 and 6) have been implemented. Most Object models (LN, DO) of other standards like IEC 61400-25-2 (Wind Turbines) can easily be implemented using the corresponding models in the CID file.

Contact SystemCorp by email for a quote.

The IEC 61850 portable software stack and API comprises:

Server and Client Function using static CID configuration file with inbuilt functions:
- Reporting (buffered and unbuffered)
- MMS Services
- GOOSE Publisher (Server) and Subscriber (Client)
- Sampled Values Publisher (Server)
- Logging (Custom XML file format)(*)

Pre-compiled libraries based on platform:
- Windows™ Library (dll) and/or
- Linux Ubuntu Library and/or
- Standard Linux library matching customer tool chain and kernel definition for one embedded hardware platform(**)

Pre-compiled libraries are also available as stand-alone products (without the need of the source code purchase).

Application Programming Interface (API) published on http://www.systemcorp.com.au/PIS10API/index.html
- 2 x free SystemCORP ICD Designer
- 1 x free SystemCORP eNode Workbench(***) allowing customer for testing ICD/CID files and simulating simple server and client functions
Notes:
(*) Customer specific file formats on request. Engineering charges may apply.
(**) Porting to non-standard Linux tool chains/kernels or propriety software operating systems engineering charges might apply.
(***) Available from January 2013