Design/Logic Flaw

A vulnerability has been identified in SIMATIC CP 343-1 Advanced incl. SIPLUS NET variant All versions V3.0.53, SIMATIC CP 443-1 Advanced incl. SIPLUS NET variant All versions V3.2.17, SIMATIC S7-300 PN/DP CPU family incl. SIPLUS variants All versions, SIMATIC S7-400 PN/DP CPU family incl. SIPLUS...

CVE-2016-8672

A vulnerability has been identified in SIMATIC CP 343-1 Advanced incl. SIPLUS NET variant All versions V3.0.53, SIMATIC CP 443-1 Advanced incl. SIPLUS NET variant All versions V3.2.17, SIMATIC S7-300 PN/DP CPU family incl. SIPLUS variants All versions, SIMATIC S7-400 PN/DP CPU family incl. SIPLUS...

CVE-2016-8672: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been identified in SIMATIC CP 343-1 Advanced incl. SIPLUS NET variant All versions V3.0.53, SIMATIC CP 443-1 Advanced incl. SIPLUS NET variant All versions V3.2.17, SIMATIC S7-300 PN/DP CPU family incl. SIPLUS variants All versions, SIMATIC S7-400 PN/DP CPU family incl. SIPLUS...

PT-2016-7550

Name of the Vulnerable Software and Affected Versions SIMATIC CP 343-1 Advanced incl. SIPLUS NET variant versions prior to V3.0.53 SIMATIC CP 443-1 Advanced incl. SIPLUS NET variant versions prior to V3.2.17 SIMATIC S7-300 PN/DP CPU family incl. SIPLUS variants affected versions not specified...

CVE-2016-8673: Cross-Site Request Forgery (CSRF)

A vulnerability has been identified in SIMATIC CP 343-1 Advanced incl. SIPLUS NET variant All versions V3.0.53, SIMATIC CP 443-1 Advanced incl. SIPLUS NET variant All versions V3.2.17, SIMATIC S7-300 PN/DP CPU family incl. SIPLUS variants All versions, SIMATIC S7-400 PN/DP CPU family incl. SIPLUS...

PT-2016-7549

Name of the Vulnerable Software and Affected Versions SIMATIC CP 343-1 Advanced incl. SIPLUS NET variant versions prior to V3.0.53 SIMATIC CP 443-1 Advanced incl. SIPLUS NET variant versions prior to V3.2.17 SIMATIC S7-300 PN/DP CPU family incl. SIPLUS variants affected versions not specified...

rdsa2012.com Open Redirect vulnerability

Vulnerable URL: http://rdsa2012.com/static/lprdr.html?r=http://xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 343 Google Pagerank| 0 VIP website status:| Ye...

Code injection

A vulnerability has been identified in SIMATIC NET CP 342-5 incl. SIPLUS variants All versions, SIMATIC NET CP 343-1 Advanced incl. SIPLUS variants All versions V3.0.44, SIMATIC NET CP 343-1 Lean incl. SIPLUS variants All versions V3.1.1, SIMATIC NET CP 343-1 Standard incl. SIPLUS variants All...

CVE-2015-8214

CVE-2015-8214 affects Siemens SIMATIC CP modules (CP 342-5, CP 343-1 variants, CP 443-1 variants, TIM 3V-IE/4R-IE, including SIPLUS) across many versions. Root cause: the access protection layer could allow unauthenticated users to perform administrative operations if network access to port 102/T...

CVE-2015-8214: Undefined Security Weakness

A vulnerability has been identified in SIMATIC NET CP 342-5 incl. SIPLUS variants All versions, SIMATIC NET CP 343-1 Advanced incl. SIPLUS variants All versions V3.0.44, SIMATIC NET CP 343-1 Lean incl. SIPLUS variants All versions V3.1.1, SIMATIC NET CP 343-1 Standard incl. SIPLUS variants All...

Siemens SIMATIC Communication Processor Vulnerability (Update C)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMATIC Communication Processor Vulnerability: Authentication Bypass Issues 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-15-335-03...

GE Hydran M2 Predictable TCP Initial Sequence Vulnerability

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on February 10, 2015, and is being released to the NCCIC/ICS-CERT web site. Raheem Beyah, David Formby, and San Shin Jung of Georgia Tech, via a research project partially sponsored by the Georgia Tech National...

Amazon Linux: Security Advisory (ALAS-2014-343)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : php54 (ALAS-2014-343)

The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple wildcards with unlimited repetitions, which allows context-dependent attackers to cause a denial of service CPU consumption via a crafted ASCII file that triggers a large amount of...

HTML Email Creator <= 2.1b668 (html) Local SEH Overwrite Exploit

No description provided by source. / :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered and Exploited by dun HTML Email Creator = 2.1 build 668 html Local SEH Overwrite Exploit Vendor: http://www.html-email.net/...

Slackware Advisory SSA:2010-343-02 mozilla-thunderbird

The remote host is missing an update as announced via advisory SSA:2010-343-02. OpenVAS Vulnerability Test $Id: esoftslkssa201034302.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

AOL 9.5 - .rtx Local Buffer Overflow

AOL 9.5 - .rtx Local Buffer Overflow !/usr/bin/python Bug : AOL 9.5 rtx Local Buffer Overflow Exploit by sup3r Tested on : XP SP3 header1 = "\x3c\x48\x54\x4d\x4c\x3e\x3c\x46\x4f\x4e\x54\x20\x20\x53\x49\x5a" "\x45\x3d\x32\x20\x50\x54\x53\x49\x5a\x45\x3d\x31\x30\x20\x46\x41"...

Mp3-Nator 2.0 - 'ListData.dat' Universal Buffer Overflow (SEH)

!/usr/bin/perl + Bug : Mp3-Nator 2.0 ListData.dat Universal Buffer Overflow Exploit SEH + Author : ThE g0bL!N Greetz to all my friends Download:http://files.brothersoft.com/mp3audio/players/mp3nator.zip Tested on: Windows XP Pro SP2 Fr Ismail: Hadi Wallah Ghir 3la Rabbi : usage: After Clicking On...

Debian: Security Advisory (DSA-343)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 5.04 / 5.10 / 6.06 LTS : bind9 vulnerabilities (USN-343-1)

bind did not sufficiently verify particular requests and responses from other name servers and users. By sending a specially crafted packet, a remote attacker could exploit this to crash the name server. Note that Tenable Network Security has extracted the preceding description block directly fro...