PT-2019-20352

Уязвимость веб-интерфейс управления серверного приложение для управления предприятием пищевой промышленности AK-EM 800 связана с ошибками при генерации паролей. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к службе отладки...

PT-2019-20349

Уязвимость веб-интерфейс управления серверного приложение для управления предприятием пищевой промышленности AK-EM 800 связана блокировкой учетной записи после пяти последовательных неудачных попыток входа в систему. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно,...

PT-2019-20347

Уязвимость серверного приложение для управления предприятием пищевой промышленности AK-EM 800 связана с неправильными настройками прав доступа по умолчанию. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код с привилегиями SYSTEM...

PT-2019-20348

Уязвимость функции downloadLogFiles серверного приложение для управления предприятием пищевой промышленности AK-EM 800 связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнять произвольные SQL-запросы через...

Rockwell Automation/Allen-Bradley PanelView 800 2711R-T4T HMI Terminal

Binary data 751129.prm...

Rockwell Automation/Allen-Bradley PanelView 800 2711R-T10T HMI Terminal

Binary data 751131.prm...

Rockwell Automation/Allen-Bradley PanelView 800 2711R-T7T HMI Terminal

Binary data 751130.prm...

Siemens Multiple Devices Profinet DCP Denial of Service

Binary data 720110.prm...

Toshiba TE-H-800-CB-* Solid State Starter Detection

Binary data 758012.prm...

Buffer overflow

Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FSM9955, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA9531, QCA9558, QCA9563, QCA9880, QCA9886, QCA9980, SD...

CVE-2017-18279

Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FSM9955, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA9531, QCA9558, QCA9563, QCA9880, QCA9886, QCA9980, SD...

Cobham Satcom Sailor 800 and 900 Cross-Site Scripting Vulnerabilities

The Cobham Satcom Sailor 800 and Cobham Satcom Sailor 900 are both shipboard maritime satellite broadband terminals from Cobham UK. A cross-site scripting vulnerability exists in the Cobham Satcom Sailor 800 and 900. A remote attacker could exploit this vulnerability to inject arbitrary web scrip...

Cobham Satcom Sailor 800 and 900 Access Control Error Vulnerabilities

The Cobham Satcom Sailor 800 and Cobham Satcom Sailor 900 are both shipboard maritime satellite broadband terminals from Cobham UK. An access control error vulnerability exists in the Cobham Satcom Sailor 800 and 900. A remote attacker could exploit this vulnerability to write to the system's...

Design/Logic Flaw

Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system's configuration file. This was exploitable via multiple attack vectors depending on the device's configuration. Further analysis also indicated this vulnerability could b...

CVE-2018-19393

Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system's configuration file. This was exploitable via multiple attack vectors depending on the device's configuration. Further analysis also indicated this vulnerability could b...

Cross site scripting

Cobham Satcom Sailor 800 and 900 devices contained persistent XSS, which required administrative access to exploit. The vulnerability was exploitable by acquiring a copy of the device's configuration file, inserting an XSS payload into a relevant field e.g., Satellite name, and then restoring the...

CVE-2018-19393

The CVE-2018-19393 entry refers to Cobham Satcom Sailor 800 and 900 devices with an arbitrary write vulnerability in the system configuration file. The issue is exploitable via multiple attack vectors depending on device configuration and can lead to a Denial of Service requiring a factory reset ...

CVE-2018-19394

CVE-2018-19394 concerns Cobham Satcom Sailor 800 and Sailor 900 devices, where a persistent cross-site scripting (XSS) vulnerability exists. The affected component is the device web interface/configuration handling, with the root cause described as an XSS payload that can be introduced by modifyi...

CVE-2018-19394: Improper Neutralization of Input During Web Page Generation

Cobham Satcom Sailor 800 and 900 devices contained persistent XSS, which required administrative access to exploit. The vulnerability was exploitable by acquiring a copy of the device's configuration file, inserting an XSS payload into a relevant field e.g., Satellite name, and then restoring the...

CVE-2018-19393: Incorrect Permission Assignment for Critical Resource

Cobham Satcom Sailor 800 and 900 devices contained a vulnerability that allowed for arbitrary writing of content to the system's configuration file. This was exploitable via multiple attack vectors depending on the device's configuration. Further analysis also indicated this vulnerability could b...