280 matches found
The vulnerability in the web interface of the Cisco Finesse automation software allows a malicious individual to gain unauthorized access to the OpenSocial Gadget Editor.
The vulnerability in the web interface for controlling the automation tools of Cisco Finesse’s operator software relates to the lack of protective measures for the web page structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the...
Omron CX-One
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Omron Equipment: CX-One Vulnerabilities: Untrusted Pointer Dereference, Stack-based Buffer Overflow, Type Confusion 2. RISK EVALUATION Successful exploitation of these vulnerabilities could crash the device being...
Command Execution Vulnerability in CyberControl of Beijing Sifang Relay Automation Co.
CyberControl is a flexible and customizable automation software platform that runs on multiple operating systems for applications ranging from monitoring masters in large industrial systems to tablet-based local monitoring systems. A command execution vulnerability exists in CyberControl of Beiji...
[SECURITY] [DLA 2223-1] salt security update
Package : salt Version : 2014.1.13+ds-3+deb8u1 CVE ID : CVE-2020-11651 CVE-2020-11652 Debian Bug : 959684 Several vulnerabilities were discovered in package salt, a configuration management and infrastructure automation software. CVE-2020-11651 The salt-master process ClearFuncs class does not...
Critical CODESYS Bug Allows Remote Code Execution
A critical flaw in a web server for the CODESYS automation software for engineering control systems could allow a remote, unauthenticated attacker to crash a server or execute code. The bug is rated 10 out of 10 on the CVSS v.2 vulnerability severity scale and requires little skill to exploit, th...
Command Execution Vulnerability in Tongda OA
Tongda OA is a collaborative office automation software. A command execution vulnerability exists in Tongda OA, which can be exploited by an attacker to execute arbitrary commands...
CVE-2019-5158
An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software v1.6.1.5. A specially crafted firmware update file can allow an attacker to install an older firmware version while the user thinks a newer firmware versio...
Design/Logic Flaw
An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software v1.6.1.5. A specially crafted firmware update file can allow an attacker to install an older firmware version while the user thinks a newer firmware versio...
CVE-2019-5158
An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software v1.6.1.5. A specially crafted firmware update file can allow an attacker to install an older firmware version while the user thinks a newer firmware versio...
CVE-2019-5158
WAGO e!COCKPIT firmware downgrade vulnerability (CVE-2019-5158) affects WAGO e!COCKPIT automation software and its firmware update mechanism. A crafted WUP (firmware update package) can bypass integrity by manipulating the package-info.xml metadata (e.g., Revision/ReleaseIndex) inside the unsigne...
CVE-2019-5159
CVE-2019-5159 affects WAGO e!COCKPIT 1.6.0.7. The vulnerability arises from improper input validation in the firmware update mechanism, allowing a crafted firmware update (wup) package to cause writing of arbitrary files to arbitrary locations on WAGO controllers during update. The flaw is trigge...
Vulnerability Spotlight: WAGO products contain remote code execution, other vulnerabilities
Patrick DeSantis, Carl Hurd, Kelly Leuschner and Lilith --; of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered several vulnerabilities in multiple products from the company WAGO. WAGO produces a line of automation software called “e!COCKPIT,” an...
CVE-2013-4665
SPBAS Business Automation Software 2012 has CSRF...
CVE-2013-4664
SPBAS Business Automation Software 2012 has XSS...
Cross site scripting
SPBAS Business Automation Software 2012 has XSS...
Cross site request forgery (csrf)
SPBAS Business Automation Software 2012 has CSRF...
CVE-2013-4665
SPBAS Business Automation Software 2012 has CSRF...
CVE-2013-4665
CVE-2013-4665 affects SPBAS (SPBAS Business Automation Software) 2012 and is described as a Cross-Site Request Forgery (CSRF) vulnerability. The connected documents corroborate a CSRF issue but do not provide further technical details such as affected components, exact root cause, exploit scenari...
CVE-2013-4664
The connected records (RH:CVE-2013-4664, NVD, PRION, Red Hat, CVELIST, PRION) consistently identify SPBAS Business Automation Software 2012 as vulnerable to XSS (CVE-2013-4664). The initial description states the same. Details beyond that are not provided in these documents (no explicit impact, a...