577 matches found
CVE-2019-13925
A vulnerability has been identified in SCALANCE S602 All versions = V3.0 and = V3.0 and = V3.0 and = V3.0 and V4.1. Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server...
CVE-2019-13925
CVE-2019-13925 affects Siemens SCALANCE S-600 family (S602, S612, S623, S627-2M) v3.0–v4.0.x, where specially crafted packets to port 443/tcp can cause an unbounded/ uncontrolled resource consumption and DoS on the web server. Root cause is an Uncontrolled Resource Consumption issue in the integr...
CVE-2019-13926
A vulnerability has been identified in SCALANCE S602 All versions = V3.0 and = V3.0 and = V3.0 and = V3.0 and V4.1. Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server. A cold reboot is required to restore the functionalit...
PT-2020-9415 · Siemens · Simatic S7-300 Cpu 317Tf-3 Pn/Dp +14
Name of the Vulnerable Software and Affected Versions: SIMATIC ET 200pro IM154-8 PN/DP CPU versions prior to V3.X.17 SIMATIC ET 200pro IM154-8F PN/DP CPU versions prior to V3.X.17 SIMATIC ET 200pro IM154-8FX PN/DP CPU versions prior to V3.X.17 SIMATIC ET 200S IM151-8 PN/DP CPU versions prior to...
PT-2020-2434 · Siemens · Scalance S612 +3
Name of the Vulnerable Software and Affected Versions: SCALANCE S602 versions 3.0 through 4.0 SCALANCE S612 versions 3.0 through 4.0 SCALANCE S623 versions 3.0 through 4.0 SCALANCE S627-2M versions 3.0 through 4.0 Description: A vulnerability has been identified that could cause a Denial-of-Servi...
Exploit for CVE-2020-0609
This is a PoC exploit for CVE-2020-0609 and CVE-2020-0610, two v...
Siemens Sicam Improper Input Validation
A vulnerability has been identified in SICAM A8000 CP-8000 All versions V14, SICAM A8000 CP-802X All versions V14, SICAM A8000 CP-8050 All versions V2.00. Specially crafted network packets sent to port 80/TCP or 443/TCP could allow an unauthenticated remote attacker to cause a Denial-of-Service...
Siemens Simatic Improper Input Validation
A vulnerability has been identified in SIMATIC S7-1500 CPU All versions = V2.0 and V2.5, SIMATIC S7-1500 CPU All versions = V1.8.5. Specially crafted network packets sent to port 80/tcp or 443/tcp could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the device...
ICSA-19-253-03_Siemens Industrial Products (Update P)
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Industrial Products Vulnerabilities: Excessive Data Query Operations in a Large Data Table, Integer Overflow or Wraparound, Uncontrolled Resource Consumption 2. UPDATE INFORMATION...
CB TAU Threat Intelligence Notification: Sodinokibi Ransomware
Sodinokibi otherwise known as Sodin or REvil is a ransomware variant that has recently been observed evolving its delivery techniques, leveraging fake antivirus software and PowerShell droppers. This malware appears to be related to GandCrab and is likely a result of their operation closing up...
CVE-2018-20894
cPanel before 74.0.0 makes web-site contents accessible to other local users via Git repositories SEC-443...
Hillstone Firewall StoneOS 5.5R7 Remote Code Execution Vulnerability
Hillstone is dedicated to providing users with comprehensive, smarter, zero-intrusive network security solutions. A remote code execution vulnerability exists in Hillstone Firewall StoneOS 5.5R7. Web management interface that allows attack vectors to be accessed via port 443...
CVE-2019-10930
A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules All versions , DIGSI 5 engineering software All versions V7.90, SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87,...
CVE-2019-10931
A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules All versions , DIGSI 5 engineering software All versions V7.90, SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87,...
CVE-2019-10931
A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules All versions , DIGSI 5 engineering software All versions V7.90, SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87,...
Design/Logic Flaw
A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules All versions , DIGSI 5 engineering software All versions V7.90, SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87,...
CVE-2019-10931
A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules All versions , DIGSI 5 engineering software All versions V7.90, SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87,...
Unspecified Vulnerability in Multiple Siemens Products
Siemens SIPROTEC 5 and Siemens DIGISI 5 are both products of Siemens, Germany.Siemens SIPROTEC 5 is a multifunction relay.Siemens DIGISI 5 is a set of user interfaces for Siemens SIPROTEC devices. An unspecified vulnerability exists in multiple Siemens products. A remote attacker could use...
curl: Libcurl ocasionally sends HTTPS traffic to port 443 rather than specified port 8080
Summary: We have encountered an issue with libcurl where, under certain network conditions, the library will attempt to submit data to an incorrect port as was set by CURLOPTPORT. As information is sent to an unauthorised port, we consider this an information disclosure issue. Our security softwa...