475 matches found
Design/Logic Flaw
A vulnerability has been identified in SIMATIC CN 4100 All versions V2.5. Affected device consists of an incorrect default value in the SSH configuration. This could allow an attacker to bypass network isolation...
CVE-2023-29131
A vulnerability has been identified in SIMATIC CN 4100 All versions V2.5. Affected device consists of an incorrect default value in the SSH configuration. This could allow an attacker to bypass network isolation...
CVE-2023-29131
A vulnerability has been identified in SIMATIC CN 4100 All versions V2.5. Affected device consists of an incorrect default value in the SSH configuration. This could allow an attacker to bypass network isolation...
CVE-2023-29131
The CVE-2023-29131 vulnerability affects Siemens SIMATIC CN 4100 (all versions prior to V2.5). It stems from an incorrect default in the SSH configuration, enabling bypass of network isolation and potential privilege escalation. The RedHat/ICS and other sources confirm this issue alongside a rela...
CVE-2023-29130
Siemens SIMATIC CN 4100, affected all versions prior to V2.5, has improper access controls in its configuration files that can lead to privilege escalation, allowing an attacker to gain admin access and full device control. Remediation: update to V2.5 or later per Siemens/ICS advisories. Document...
CVE-2023-29130
A vulnerability has been identified in SIMATIC CN 4100 All versions V2.5. Affected device consists of improper access controls in the configuration files that leads to privilege escalation. An attacker could gain admin access with this vulnerability leading to complete device control...
CVE-2023-29130
A vulnerability has been identified in SIMATIC CN 4100 All versions V2.5. Affected device consists of improper access controls in the configuration files that leads to privilege escalation. An attacker could gain admin access with this vulnerability leading to complete device control...
CVE-2023-29130: Improper Access Control
A vulnerability has been identified in SIMATIC CN 4100 All versions V2.5. Affected device consists of improper access controls in the configuration files that leads to privilege escalation. An attacker could gain admin access with this vulnerability leading to complete device control...
Siemens SIMATIC CN 4100 安全漏洞
The Siemens SIMATIC CN 4100 is a communication node from Siemens, Germany. A security vulnerability previously existed in the Siemens SIMATIC CN 4100 version 2.5, which resulted in an escalation of privileges due to incorrect access control included in the configuration file of the affected devic...
PT-2023-4084 · Siemens · Simatic Cn 4100
Name of the Vulnerable Software and Affected Versions: SIMATIC CN 4100 versions prior to V2.5 Description: A vulnerability has been identified in the SIMATIC CN 4100, related to an incorrect default value in the SSH configuration. This issue could allow an attacker to bypass network isolation. Th...
PT-2023-3475 · Siemens · Simatic Cn 4100
Name of the Vulnerable Software and Affected Versions: SIMATIC CN 4100 versions prior to V2.5 Description: The issue is related to errors in access management, specifically improper access controls in configuration files, which can lead to privilege escalation. An attacker, acting remotely, could...
Siemens SIMATIC CN 4100 安全漏洞
The Siemens SIMATIC CN 4100 is a communication node from Siemens, Germany. A security vulnerability previously existed in the Siemens SIMATIC CN 4100 version 2.5, which stemmed from affected devices containing incorrect default values in the SSH configuration. An attacker could exploit the...
CVE-2023-29131: Incorrect Default Permissions
A vulnerability has been identified in SIMATIC CN 4100 All versions V2.5. Affected device consists of an incorrect default value in the SSH configuration. This could allow an attacker to bypass network isolation...
Siemens SIMATIC CN 4100
1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMATIC CN 4100 Vulnerabilities: Improper Access Control, Incorrect Default Permissions 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to...
CVE-2023-20015
A vulnerability in the CLI of Cisco Firepower 4100 Series, Cisco Firepower 9300 Security Appliances, and Cisco UCS 6200, 6300, 6400, and 6500 Series Fabric Interconnects could allow an authenticated, local attacker to inject unauthorized commands. This vulnerability is due to insufficient input...
CVE-2023-20015: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the CLI of Cisco Firepower 4100 Series, Cisco Firepower 9300 Security Appliances, and Cisco UCS 6200, 6300, 6400, and 6500 Series Fabric Interconnects could allow an authenticated, local attacker to inject unauthorized commands. This vulnerability is due to insufficient input...
The vulnerability of the command-line interface (CLI) of Cisco Firepower Threat Defense (FTD) microprogramming system and Cisco FXOS operating systems on Cisco Firepower 4100 and Firepower 9300 devices allows attackers to execute arbitrary commands.
The vulnerability of the command-line interface CLI of Cisco Firepower Threat Defense microprogramming systems and Cisco FXOS operating systems in Cisco Firepower 4100 and Firepower 9300 devices is related to insufficient checking of command arguments. Exploiting this vulnerability allows an...
Cisco FXOS Software 操作系统命令注入漏洞
Cisco FXOS Software is a suite of firewall software from Cisco USA that runs in Cisco security appliances. Cisco FXOS suffers from an operating system command injection vulnerability that stems from insufficient validation of command input provided by the dui user. An attacker could exploit the...
