Security feature bypass

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Attackers with access to port 10005/tcp could perform device reconfigurations and obtain project files from the devices. The system manual recommends to protect access to this port. The security vulnerabili...

Security feature bypass

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp to obtain passwords of the device. The security vulnerability could be exploited by an unauthenticated...

CVE-2019-10921

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Unencrypted storage of passwords in the project could allow an attacker with access to port 10005/tcp to obtain passwords of the device. The security vulnerability could be exploited by an unauthenticated...

CVE-2019-10920

CVE-2019-10920 affects Siemens LOGO! 8 BM (and SIPLUS variants) with all versions before 8.3. The issue is a vulnerability in which project data on the device, accessible via port 10005/tcp, can be decrypted due to a hard-coded encryption key, allowing an unauthenticated remote attacker to access...

CVE-2019-10919

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Attackers with access to port 10005/tcp could perform device reconfigurations and obtain project files from the devices. The system manual recommends to protect access to this port. The security vulnerabili...

CVE-2019-10920

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Project data stored on the device, which is accessible via port 10005/tcp, can be decrypted due to a hardcoded encryption key. The security vulnerability could be exploited by an unauthenticated attacker wi...

CVE-2019-10919

Siemens LOGO! 8 BM (including SIPLUS variants) is affected by CVE-2019-10919 in all versions prior to V8.3. The issue allows an unauthenticated attacker with network access to port 10005/tcp to reconfigure the device and exfiltrate project files, affecting confidentiality, integrity, and availabi...

Advantech WebAccess Access Control Error Vulnerability

Advantech WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech, Taiwan, China. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. An Access Control Error vulnerability exist...

CVE-2019-3941

Advantech WebAccess 8.3.4 allows unauthenticated, remote attackers to delete arbitrary files via IOCTL 10005 RPC...

Code injection

Advantech WebAccess 8.3.4 allows unauthenticated, remote attackers to delete arbitrary files via IOCTL 10005 RPC...

CVE-2019-3941

Advantech WebAccess 8.3.4 allows unauthenticated, remote attackers to delete arbitrary files via IOCTL 10005 RPC...

CVE-2009-10005

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/contentkeeperfileaccess.rb 2025-10-23 21:12:55+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:46:44+00:00| see...

CVE-2011-10005

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/easyftpmkdfixret.rb 2024-01-16 09:26:38+00:00| seen| https://t.me/ctinow/168695 2024-01-23 01:16:38+00:00| seen|...

CVE-2017-10005

CVE-2017-10005 affects Oracle FLEXCUBE Private Banking (Miscellaneous subcomponent) within Oracle Financial Services Applications. Affected versions: 2.0.0, 2.0.1, 2.2.0, 12.0.1. It is exploitable over HTTP with network access by an unauthenticated attacker; successful exploitation requires user ...

SAP Solman 7.31 Information Disclosure

Application: SAP Solman Versions Affected: SAP Solman 7.1-7.31 Vendor URL: http://SAP.com Bugs: Information Disclosure Sent: 12.07.2016 Reported: 13.07.2016 Vendor response: 13.07.2016 Date of Public Advisory: 13.09.2016 Reference: SAP Security Note 2344524 Author: Roman Bezhan ERPScan Descriptio...

CVE-2016-10005

Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/cafeugpexampletimeoffwd requests, aka SAP Security Note 2344524...

CVE-2016-10005

CVE-2016-10005 affects SAP SolMan 7.1–7.31, via the webdynpro component path caf~eu~gp~example~timeoff~wd, enabling an anonymous, network-based attacker to disclose sensitive information defined in the system. The vulnerability is categorized as Information Disclosure and is linked to SAP Securit...

CVE-2016-10005

Webdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information via webdynpro/dispatcher/sap.com/cafeugpexampletimeoffwd requests, aka SAP Security Note 2344524...

SAP Solman - user accounts disclosure CVE-2016-10005

Application: SAP Solman Versions Affected: SAP Solman 7.1-7.31 Vendor URL: SAP Bugs: Information Disclosure Reported: 12.07.2016 Vendor response: 13.07.2016 Date of Public Advisory: 13.09.2016 Reference: SAP Security Note 2344524 Author: Roman Bezhan ERPScan VULNERABILITY INFORMATION CVE-2016-100...

CVE-2014-10005

CVE-2014-10005 affects Maian Uploader 4.0. The issue arises when requesting load_flv.js.php without the required height parameter, which may cause an error message that reveals the installation path. This is a potential information disclosure in the affected component (load_flv.js.php). The docum...