266 matches found
Schneider Electric homeLYnk和spaceLYnk 加密问题漏洞
Schneider Electric homeLYnk and spaceLYnk are both automation programming software for different logic controllers from Schneider Electric, France. An unauthorized access vulnerability exists in Schneider Electric homeLYnk and spaceLYnk, which arises from the presence of a broken or dangerous...
Omron CX-One
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Omron Equipment: CX-One Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability may allow arbitrary code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The...
IBM Cloud Pak for Automation XML External Entity Injection Vulnerability
IBM Cloud Pak for Automation is an enterprise container cloud intelligence automation software platform that supports business users in building and running automation applications using containers on Kubernetes. An XML external entity injection vulnerability exists in IBM Cloud Pak for Automatio...
ForceControl suffers from a denial of service vulnerability (CNVD-2021-24698)
ForceControl is a general-purpose man-machine visualization monitoring and configuration software, which is the first automation software product in China with distributed real-time database technology as its core. ForceControl has a denial of service vulnerability that can be exploited by...
Denial of Service Vulnerability in ForceControl
ForceControl is a general-purpose man-machine visualization monitoring and configuration software, which is the first automation software product in China with distributed real-time database technology as its core. ForceControl has a denial of service vulnerability that can be exploited by...
The vulnerability in the web interface of the Cisco Finesse automation software allows a malicious individual to gain unauthorized access to the OpenSocial Gadget Editor.
The vulnerability in the web interface for controlling the automation tools of Cisco Finesse’s operator software relates to the lack of protective measures for the web page structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the...
Omron CX-One
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Omron Equipment: CX-One Vulnerabilities: Untrusted Pointer Dereference, Stack-based Buffer Overflow, Type Confusion 2. RISK EVALUATION Successful exploitation of these vulnerabilities could crash the device being...
Command Execution Vulnerability in CyberControl of Beijing Sifang Relay Automation Co.
CyberControl is a flexible and customizable automation software platform that runs on multiple operating systems for applications ranging from monitoring masters in large industrial systems to tablet-based local monitoring systems. A command execution vulnerability exists in CyberControl of Beiji...
[SECURITY] [DLA 2223-1] salt security update
Package : salt Version : 2014.1.13+ds-3+deb8u1 CVE ID : CVE-2020-11651 CVE-2020-11652 Debian Bug : 959684 Several vulnerabilities were discovered in package salt, a configuration management and infrastructure automation software. CVE-2020-11651 The salt-master process ClearFuncs class does not...
Critical CODESYS Bug Allows Remote Code Execution
A critical flaw in a web server for the CODESYS automation software for engineering control systems could allow a remote, unauthenticated attacker to crash a server or execute code. The bug is rated 10 out of 10 on the CVSS v.2 vulnerability severity scale and requires little skill to exploit, th...
Command Execution Vulnerability in Tongda OA
Tongda OA is a collaborative office automation software. A command execution vulnerability exists in Tongda OA, which can be exploited by an attacker to execute arbitrary commands...
CVE-2019-5158
An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software v1.6.1.5. A specially crafted firmware update file can allow an attacker to install an older firmware version while the user thinks a newer firmware versio...
Design/Logic Flaw
An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software v1.6.1.5. A specially crafted firmware update file can allow an attacker to install an older firmware version while the user thinks a newer firmware versio...
CVE-2019-5158
An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software v1.6.1.5. A specially crafted firmware update file can allow an attacker to install an older firmware version while the user thinks a newer firmware versio...
CVE-2019-5158
WAGO e!COCKPIT firmware downgrade vulnerability (CVE-2019-5158) affects WAGO e!COCKPIT automation software and its firmware update mechanism. A crafted WUP (firmware update package) can bypass integrity by manipulating the package-info.xml metadata (e.g., Revision/ReleaseIndex) inside the unsigne...
CVE-2019-5159
CVE-2019-5159 affects WAGO e!COCKPIT 1.6.0.7. The vulnerability arises from improper input validation in the firmware update mechanism, allowing a crafted firmware update (wup) package to cause writing of arbitrary files to arbitrary locations on WAGO controllers during update. The flaw is trigge...
Vulnerability Spotlight: WAGO products contain remote code execution, other vulnerabilities
Patrick DeSantis, Carl Hurd, Kelly Leuschner and Lilith --; of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered several vulnerabilities in multiple products from the company WAGO. WAGO produces a line of automation software called “e!COCKPIT,” an...
CVE-2013-4665
SPBAS Business Automation Software 2012 has CSRF...