PT-2020-18912

Name of the Vulnerable Software and Affected Versions Allen-Bradley Flex IO 1794-AENT/B version 4.003 Description A denial of service issue exists in the ENIP Request Path Logical Segment functionality. This can be triggered by a specially crafted network request, specifically by sending an...

PT-2020-18913

Name of the Vulnerable Software and Affected Versions Allen-Bradley Flex IO 1794-AENT/B version 4.003 Description A denial of service issue exists in the ENIP Request Path Logical Segment functionality. This can be triggered by a specially crafted network request, specifically by sending an...

CVE-2020-6084: Buffer Copy without Checking Size of Input

An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a...

openh264:decoder_fuzzer: Heap-buffer-overflow in WelsDec::UpdateP16x16RefIdx

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5640459780882432 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasani386openh264 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

CVE-2020-11637

A memory leak in the TFTP service in B&R Automation Runtime versions N4.26, N4.34, F4.45, E4.53, D4.63, A4.73 and prior could allow an unauthenticated attacker with network access to cause a denial of service DoS condition...

CVE-2020-11646

A log information disclosure vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to view log information reserved for other users...

CVE-2020-11645

A denial of service vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to limit availability of GateManager instances...

CVE-2020-11644

The information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to generate fake audit log messages...

CVE-2020-11642

The local file inclusion vulnerability present in B&R SiteManager versions 9.2.620236042 allows authenticated users to impact availability of SiteManager instances...

CVE-2020-11643

An information disclosure vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to view information of devices belonging to foreign domains...

Information disclosure

The information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to generate fake audit log messages...

Information disclosure

A log information disclosure vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to view log information reserved for other users...

Denial of service

A denial of service vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to limit availability of GateManager instances...

Remote file inclusion

The local file inclusion vulnerability present in B&R SiteManager versions 9.2.620236042 allows authenticated users to impact availability of SiteManager instances...

CVE-2020-11637

CVE-2020-11637 describes a memory leak in the TFTP service of B&R Automation Runtime, affecting versions <N4.26, <N4.34, <F4.45, <E4.53, <D4.63,

CVE-2020-11637 Automation Runtime TFTP Service DoS Vulnerability

A memory leak in the TFTP service in B&R Automation Runtime versions N4.26, N4.34, F4.45, E4.53, D4.63, A4.73 and prior could allow an unauthenticated attacker with network access to cause a denial of service DoS condition...

CVE-2020-11646 GateManager Log Information Disclosure Vulnerability

A log information disclosure vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to view log information reserved for other users...

CVE-2020-11646

CVE-2020-11646 is a log information disclosure vulnerability in B&R GateManager and related SiteManager components. An authenticated user can view information about logs and devices belonging to their own or a foreign domain, exposing sensitive data. Affected versions include GateManager 4260 and...

CVE-2020-11645 GateManager Denial of Service Vulnerability

A denial of service vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to limit availability of GateManager instances...

CVE-2020-11645

CVE-2020-11645 is a DoS vulnerability affecting B&R GateManager 4260/9250 (versions prior to 9.0.20262) and GateManager 8250 (prior to 9.2.620236042). An authenticated user can limit the availability of GateManager instances. The issue is documented in multiple sources (NVD/NVD-variants, CISA ICS...