Buffer overflow

Tenda AC10-1200 v15.03.06.23EN was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function...

Buffer overflow

Tenda AC10-1200 v15.03.06.23EN was discovered to contain a buffer overflow via the urls parameter in the saveParentControlInfo function...

CVE-2022-26243

Tenda AC10-1200 v15.03.06.23EN was discovered to contain a buffer overflow in the setSmartPowerManagement function...

CVE-2022-26243

CVE-2022-26243 affects Tenda AC10-1200 (firmware v15.03.06.23_EN). The vulnerability is a buffer overflow in the setSmartPowerManagement function, caused by improper handling/validation of input data, leading to a potential crash. Multiple connected sources corroborate the issue, describing a mem...

CVE-2021-38772

CVE-2021-38772 affects the Tenda AC10-1200 router (firmware around v15.03.06.23_EN). The vulnerability is a buffer overflow in the fromSetIpMacBind function triggered by the list parameter, leading to memory boundary violations that can crash the program. References consistently describe a memory...

CVE-2021-38772

Tenda AC10-1200 v15.03.06.23EN was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function...

CVE-2021-38278

Tenda AC10-1200 v15.03.06.23EN was discovered to contain a buffer overflow via the urls parameter in the saveParentControlInfo function...

CVE-2021-38278

CVE-2021-38278 affects Tenda AC10-1200 devices (v15.03.06.23_EN) where a buffer overflow can be triggered in the saveParentControlInfo function via the urls parameter. The vulnerability is caused by improper validation of data boundaries in memory operations, potentially enabling buffer overflow....

Tenda AC10 缓冲区错误漏洞

Tenda AC10-1200 is a wireless router from Tenda China.A buffer error vulnerability exists in the Tenda AC10-1200, which stems from a failure to properly validate data boundaries when performing operations on memory in the setSmartPowerManagement function. An attacker could exploit this...

Siemens SIMATIC Industrial Products Operation On a Resource After Expiration or Release (CVE-2021-37185)

A vulnerability has been identified in SIMATIC Drive Controller family All versions = V2.9.2 = V21.9 = V4.5.0 = V2.9.2 = V21.9 = V4.0 V4.0 SP1, SIPLUS TIM 1531 IRC All versions V2.3.6, TIM 1531 IRC All versions V2.3.6. An unauthenticated attacker could cause a denial- of-service condition in a PL...

The vulnerability of the microprogrammed software of the SIMATIC S7-1200 programmable logic controller lies in the possibility for unauthorized users to execute commands, allowing intruders to initiate and terminate the controller’s operations.

The vulnerability of the microprogrammed control system of the SIMATIC S7-1200 programmable logic controller is related to the possibility for unauthorized users to execute commands. Exploiting this vulnerability could allow an intruder, operating remotely, to execute commands to start and stop t...

Siemens S7-1200 - Unauthenticated Start / Stop Command Vulnerability

Exploit Title: Unauthenticated Siemens S7-1200 CPU Start/Stop Command Exploit Author: RoseSecurity Vendor Homepage: https://www.siemens.com/global/en.html Version: V4.5 and below Tested on: Siemens S7-1200 CPU: 1215C IP == PLC IP address Start Command curl -i -s -k -X $'POST' \ -H $'Host: ' -H...

Siemens S7-1200 - Unauthenticated Start/Stop Command

Exploit Title: Unauthenticated Siemens S7-1200 CPU Start/Stop Command Date: 09/03/2022 Exploit Author: RoseSecurity Vendor Homepage: https://www.siemens.com/global/en.html Version: V4.5 and below Tested on: Siemens S7-1200 CPU: 1215C IP == PLC IP address Start Command curl -i -s -k -X $'POST' \ -...

Siemens S7-1200 4.5 Unauthenticated Access

Exploit Title: Unauthenticated Siemens S7-1200 CPU Start/Stop Command Date: 09/03/2022 Exploit Author: RoseSecurity Vendor Homepage: https://www.siemens.com/global/en.html Version: V4.5 and below Tested on: Siemens S7-1200 CPU: 1215C IP == PLC IP address Start Command curl -i -s -k -X $'POST' \ -...

1200.es Cross Site Scripting vulnerability OBB-2389092

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-37204

A vulnerability has been identified in SIMATIC Drive Controller family All versions = V2.9.2 = V21.9 = V4.5.0 = V2.9.2 = V21.9 = V4.0 V4.0 SP1, SIPLUS TIM 1531 IRC All versions V2.3.6, TIM 1531 IRC All versions V2.3.6. An unauthenticated attacker could cause a denial-of-service condition in a PLC...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC Drive Controller family All versions = V2.9.2 = V21.9 = V4.5.0 = V2.9.2 = V21.9 = V4.0 V4.0 SP1, SIPLUS TIM 1531 IRC All versions V2.3.6, TIM 1531 IRC All versions V2.3.6. An unauthenticated attacker could cause a denial-of-service condition in a PLC...

CVE-2021-37205

CVE-2021-37205 affects Siemens SIMATIC Drive Controller family and related devices (Drive Controller, ET 200SP Open Controller CPU 1515SP PC2, S7-1200/1500 families, S7-PLCSIM Advanced, TIM 1531 IRC). The issue is a memory-management flaw (MISSING RELEASE OF MEMORY AFTER EFFECTIVE LIFETIME) that ...

CVE-2021-37204

CVE-2021-37204 affects Siemens SIMATIC industrial products including Drive Controller family (all versions

Denial of Service Vulnerability in Multiple Siemens Industrial Products (CNVD-2022-10003)

SIMATIC Drive Controller family products are machines designed for production automation, combining the functionality of the SIMATIC S7-1500 CPU and the SINAMICS S120 drive control.SIMATIC S7-1200 CPU family products are designed for discrete and continuous control in industrial environments such...