CVE-2017-8415

An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom telnet daemon as a part of the busybox and retrieves the password from the shadow file using the function getspnam at address 0x00053894. Then performs a crypt operation on the password retrieved from the use...

CVE-2017-8412

CVE-2017-8412 affects D-Link DCS-1100 and DCS-1130 devices. A custom mp4ts binary in /var/www/video dumps the HTTP VERB into logs and copies user input via a vulnerable sprintf into a string without bounds checking, leading to a stack overflow that can overwrite the PC and enable buffer overflow ...

CVE-2017-8414

CVE-2017-8414 affects D-Link DCS-1100 and DCS-1130 network cameras. The /sbin orthrus UPnP handler takes the command-line parameter -f and performs a sprintf to the stack without length checking, which corrupts registers in a function (sub_A098) and leads to memory corruption. Public advisories (...

CVE-2017-8410

The CVE-2017-8410 issue affects D-Link DCS-1100 and DCS-1130 cameras. The rtspd RTSP handler in /sbin performs a memcpy using the Authorization: Basic header data, with copy length derived from the header string length, causing a stack overwrite and memory corruption. This leads to potential arbi...

CVE-2017-8405

CVE-2017-8405 affects D-Link DCS-1130 and DCS-1100 cameras. The rtspd binary loads an Authenticate flag (default 0) that governs access to the video feed. While HTTP management requires login, RTSP does not enforce authentication by default, because the corresponding checkbox is unchecked. This c...

Rockwell Automation/Allen-Bradley MicroLogix 1100 L16xxx < 10.000 HTTP Remote DoS

Binary data 76.prm...

Rockwell Automation MicroLogix 1100/1400 and CompactLogix 5370 Controllers Open Redirection Vulnerability

The Rockwell Automation MicroLogix 1100/1400 or CompactLogix 5370 controller web server is affected by an open redirect vulnerability. An unauthenticated remote attacker can exploit this issue in conjunction with a social engineering attack to redirect the user to a malicious site that could run ...

Rockwell Automation/Allen-Bradley MicroLogix 1100 Detection

Binary data 65.prm...

Rockwell Automation/Allen-Bradley MicroLogix 1100 PLC Detection

Binary data 750414.prm...

Rockwell Automation Micrologix 1100 and 1400 <= 11 Unauthorized Privilege Access or DOS

Binary data 720209.prm...

Rockwell Automation/Allen-Bradley Multiple Devices Cleartext Transmission

Binary data 720095.prm...

Rockwell Automation/Allen-Bradley MicroLogix 1100 Controllers Denial of Service (ICSA-17-138-03)

Binary data 720131.prm...

Rockwell Automation/Allen-Bradley MicroLogix 1100 PLC Detection

Binary data 750416.prm...

Rockwell Automation/Allen-Bradley MicroLogix 1100 PLC Detection

Binary data 750413.prm...

Rockwell Automation/Allen-Bradley Multiple Devices Denial of Service

Binary data 720096.prm...

Rockwell Automation/Allen-Bradley MicroLogix 1100 PLC Detection

Binary data 750415.prm...

CVE-2019-10955

In Rockwell Automation MicroLogix 1400 Controllers Series A, All Versions Series B, v15.002 and earlier, MicroLogix 1100 Controllers v14.00 and earlier, CompactLogix 5370 L1 controllers v30.014 and earlier, CompactLogix 5370 L2 controllers v30.014 and earlier, CompactLogix 5370 L3 controllers...

CVE-2019-9955

Zyxel devices including ATP200/ATP500/ATP800, USG and ZyWALL series (e.g., USG20-VPN/USG1100/USG1900/ ZyWALL 110/310) are affected by CVE-2019-9955. The vulnerability is a reflected Cross-Site Scripting flaw on the security firewall login page caused by unsanitized mp_idx parameter in weblogin.cg...

openSUSE Security Update : zsh (openSUSE-2019-501)

This update for zsh to version 5.5 fixes the following issues : Security issues fixed : - CVE-2018-1100: Fixes a buffer overflow in utils.c:checkmailpath that can lead to local arbitrary code execution bsc1089030 - CVE-2018-1071: Fixed a stack-based buffer overflow in exec.c:hashcmd bsc1084656 -...

Rockwell Automation MicroLogix 1100 Denial of Service (CVE-2017-7924)

A denial of service vulnerability exists in Rockwell MicroLogix 1100 controllers. An unauthenticated, remote attacker could exploit this vulnerability by sending a specially crafted CIP packet to an affected device, causing a system crash...