CVE-2024-2427 Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper traffic throttling in the device. If multiple data packets are sent to the device repeatedly the device will crash and require a manual restart to recover...

CVE-2024-2426 Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, a disruption in the CIP communication will occur and a manual restart will be required by the user to recover it...

CVE-2024-2426 Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, a disruption in the CIP communication will occur and a manual restart will be required by the user to recover it...

CVE-2024-2426

The CVE-2024-2426 entry concerns Rockwell Automation PowerFlex 527, affecting versions v2.001.x and later. The vulnerability is an improper input validation in the device that can cause a denial-of-service by disrupting CIP communication, potentially requiring a manual restart to recover. The iss...

CVE-2024-2425

Summary (CVE-2024-2425) Rockwell Automation PowerFlex 527 is affected by a denial-of-service vulnerability due to improper input validation (CWE-120). Affected product: PowerFlex 527, versions v2.001.x and later. Impact: remote DoS causing the web server to crash and require a manual restart; hig...

CVE-2024-2425 Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, the web server will crash and need a manual restart to recover it...

CVE-2024-2425 Rockwell Automation - Denial-of-service and Input Validation Vulnerabilities in PowerFlex® 527

A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, the web server will crash and need a manual restart to recover it...

Rockwell Automation PowerFlex 安全漏洞

The Rockwell Automation PowerFlex 527 is an adjustable AC frequency converter from Rockwell Automation. The Rockwell Automation PowerFlex 527 has an input validation error vulnerability that can be exploited by an attacker to cause CIP communication to be interrupted, requiring a manual restart...

Rockwell Automation PowerFlex 525 安全漏洞

The Rockwell Automation PowerFlex 527 is an adjustable AC frequency converter from Rockwell Automation. A denial of service vulnerability exists in the Rockwell Automation PowerFlex 527, which stems from improper restriction of device traffic and can be exploited by an attacker to cause the devic...

Rockwell Automation PowerFlex 525 安全漏洞

The Rockwell Automation PowerFlex 527 is an adjustable AC frequency converter from Rockwell Automation. The Rockwell Automation PowerFlex 527 has an input validation error vulnerability that can be exploited by an attacker to cause a denial of service...

Rockwell Automation FactoryTalk View ME 安全漏洞

Rockwell Automation FactoryTalk View ME is a human-machine interface HMI software from Rockwell Automation, Inc. that is used to create and deploy monitoring and control interfaces that run on plant equipment and machines. A security vulnerability exists in versions prior to Rockwell Automation...

Security Bulletin: OpenSSH vulnerability affects IBM WebSphere Adapter for FTP shipped with IBM Business Automation Workflow - CVE-2023-48795

Summary IBM WebSphere Adapter for FTP is shipped with IBM Business Automation Workflow and is vulnerable to a machine-in-the-middle attack. Vulnerability Details CVEID:CVE-2023-48795 DESCRIPTION: OpenSSH is vulnerable to a machine-in-the-middle attack, caused by a flaw in the extension negotiatio...

CVE-2024-2580

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FunnelKit Automation By Autonami allows Stored XSS.This issue affects Automation By Autonami: from n/a through 2.8.2...

CVE-2024-2580

CVE-2024-2580 affects WordPress Automation By Autonami (FunnelKit Automations) up to version 2.8.2, with a Stored XSS in Cross Site Scripting via input during web page generation. Root cause: improper input neutralization/output escaping. Impact: potential stored attacker-controlled scripts execu...

CVE-2024-2580 WordPress Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FunnelKit Automation By Autonami allows Stored XSS.This issue affects Automation By Autonami: from n/a through 2.8.2...

CVE-2024-29019 ESPHome vulnerable to Authentication bypass via Cross site request forgery

ESPHome is a system to control microcontrollers remotely through Home Automation systems. API endpoints in dashboard component of ESPHome version 2023.12.9 command line installation are vulnerable to Cross-Site Request Forgery CSRF allowing remote attackers to carry out attacks against a logged...

CVE-2024-28286

In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServerhandleFileCloseRequest.c function of src/mms/isomms/server/mmsfileservice.c. The vulnerability manifests as SEGV and causes the application to crash...

CVE-2023-35899

IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file...

PT-2024-2368 · Rockwell Automation · Powerflex 527

Name of the Vulnerable Software and Affected Versions: Rockwell Automation PowerFlex 527 affected versions not specified Description: A denial-of-service issue exists due to improper traffic throttling in the device. If multiple data packets are sent to the device repeatedly, the device will cras...

Mz Automation Libiec61850 安全漏洞

Mz Automation Libiec61850 is an open source library for the IEC 61850 protocol from Mz Automation. A security vulnerability exists in Mz Automation Libiec61850 v1.4.0 and earlier versions, which originates from the mmsServerhandleFileCloseRequest.c function in src/mms/isomms/server/mmsfileservice...