CVE-2015-3322

Lenovo ThinkServer RD350/RD450/RD550/RD650/TD350—before BIOS firmware 1.26.0, BIOS passwords (user and admin) are stored with a legacy, weak encryption. This could allow an attacker to decrypt passwords via unspecified vectors. Affected models require upgrading to BIOS firmware version 1.26.0 (or...

Procyon Core Server HMI Memory Corruption SCADA Remote Code Execution - Ver2 (CVE-2011-3322)

A remote stack overflow vulnerability has been reported in Procyon Core Server HMI service. The vulnerability is due to a boundary check error. A remote attacker may exploit this issue by sending specially crafted messages to the target server. Successful exploitation could allow an attacker to...

CVE-2014-3322

Cisco IOS XR on ASR 9000 devices is affected by a NetFlow processing DoS caused by improper sampling of malformed IPv4/IPv6 packets (Bug CSCuo68417). The issue affects Typhoon-based line cards and can cause a lockup and reload of the Network Processor chip and line card when processing malicious ...

NetApp OnCommand System Manager 2.1 / 2.0.2 XSS / File Inclusion / Command Execution

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: NetApp OnCommand System Manager vulnerable version: = 2.1 and =2.0.2 fixed version: 2.2 only XSS fixed CVE: CVE-2013-3320 XSS...

CVE-2012-3322

CVE-2012-3322 is an XSS vulnerability described across multiple IBM Maximo-related products (Maximo Asset Management 6.2–7.5, Essentials 6.2–7.5, TAM for IT 6.2–7.2, Service Request Manager 7.1–7.2, Service Desk 6.2, CCMDB 7.1–7.2, SmartCloud Control Desk 7.5). It allows remote authenticated user...

Nitol Botnet Shares Code with Other China-Based DDoS Malware

Microsoft has learned that much of the code used by the Nitol malware family is copied from free malware resources hosted on Chinese websites. Microsoft posted portions of the code online this week where similar lines used for denial of service attack functionality are present in Nitol and on the...

CVE-2011-3322

Core Server HMI Service Coreservice.exe in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long password to the Telnet TCP/23 port, which triggers an out-of-bounds read or...

CVE-2011-3322

CVE-2011-3322 affects Procyon Core Server HMI's Coreservice.exe in Scadatec Limited Procyon SCADA 1.06 and other versions before 1.14. The root cause is a boundary check error that, when processing a password sent to Telnet (TCP/23), can trigger an out-of-bounds read/write on the stack, leading t...

CVE-2011-3322

creationtimestamp| type| source ---|---|--- 2011-09-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17827 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/procyoncoreserver.rb 2025-02-06 03:13:40+00:00|...

Procyon Core Server HMI Coreservice.exe Stack Buffer Overflow

This module exploits a vulnerability in the coreservice.exe component of Proycon Core Server use exploit/windows/scada/procyon/coreserver msf undefinedcoreserver show actions ...actions... msf undefinedcoreserver set ACTION msf undefinedcoreserver show options ...show and set options... msf...

Scadatec Limited Procyon Telnet Buffer Overflow

Overview ICS-CERT originally released Advisory ICSA-11-216-01P on the US-CERT Portal on August 04, 2011. This web page release was delayed to allow users sufficient time to download and install the update. ICS-CERT has received a report from Knud Højgaard of the nSense Vulnerability Coordination...

CVE-2010-3322

Summary: CVE-2010-3322 affects Splunk 4.0.0–4.1.4 due to an XML External Entity (XXE) flaw in the XML parser. Remote authenticated users could obtain sensitive information and gain privileges via XXE. Details in connected documents confirm the affected software and the underlying cause, but no ex...

CVE-2009-3322

CVE-2009-3322 affects the Siemens Gigaset SE361 WLAN router. A remote attacker can trigger a denial of service (device reboot) by sending a flood of crafted TCP packets to port 1723. The connected advisory confirms a remote DoS vulnerability; exploitation details are not provided beyond this, and...

CVE-2009-3322

creationtimestamp| type| source ---|---|--- 2009-09-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9646...

CVE-2008-3322

admin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary recipecookie cookie...

CVE-2008-3322

CVE-2008-3322 affects Maian Recipe 1.2 and earlier. The vulnerability allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary recipe_cookie cookie to admin/index.php, enabling unauthorized admin access. The issue is documented across multiple feeds ...

CVE-2008-3322

creationtimestamp| type| source ---|---|--- 2008-07-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6063...

CVE-2007-3322

The CVE concerns the Avaya 4602 SIP IP Phone (Model 4602D02A) running firmware version 2.2.2 and earlier. The vulnerability arises from using a constant media port for calls, which enables remote attackers to cause a denial of service (audio quality loss) by flooding the RTP port. The connected d...

CVE-2006-3322

SQL injection vulnerability in includes/functionslogging.php in phpRaid 3.0.5, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the loghack function...

CVE-2006-3322

CVE-2006-3322 affects phpRaid 3.0.5 (and possibly other versions). The vulnerability is an SQL injection in includes/functions_logging.php, via the log_hack function, enabling remote attackers to execute arbitrary SQL commands. CVSS v2 base score 5.1 (MEDIUM) with network attack vector, high acce...