19025 matches found
Exploit for PHP External Variable Modification in Juniper Junos
Automation for Juniper CVE:2023-36845 Overview This is a bash...
Vulnerability fixed in Rockwell Automation FactoryTalk
Rockwell Automation has fixed a vulnerability in FactoryTalk Service Platform. A malicious party could exploit the vulnerability to obtain the Service Token to gain unauthorized access gain unauthorized access to other FactoryTalk systems connected to the infrastructure. Once gained access, the...
PT-2024-10877 · B&R Industrial Automation · Automation Studio
Name of the Vulnerable Software and Affected Versions: B&R Industrial Automation Automation Studio versions 4.0 through 4.12 Description: The issue is related to an improper control of generation of code, also known as 'Code Injection', which allows for local execution of code. This is due to an...
The vulnerability of Websoft HCM’s automation software for HR processes lies in its ability to bypass a relative path, allowing attackers to perform arbitrary file operations outside of the directory.
The vulnerability of Websoft HCM’s automation software for HR processes involves exploiting a relative path. Exploiting this vulnerability allows an attacker to perform arbitrary file operations outside the directory...
CVE-2024-21916
A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If exploited, the product could potentially experience a major nonrecoverable fault MNRF. The device will restart itself to recover from the MNRF...
CVE-2024-21917
A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows a malicious user to obtain the service token and use it for authentication on another FTSP directory. This is due to the lack of digital signing between the FTSP service token and directory. If exploited, a...
Denial of service
A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If exploited, the product could potentially experience a major nonrecoverable fault MNRF. The device will restart itself to recover from the MNRF...
Authentication flaw
A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows a malicious user to obtain the service token and use it for authentication on another FTSP directory. This is due to the lack of digital signing between the FTSP service token and directory. If exploited, a...
CVE-2024-21916
Summary (CVE-2024-21916): DoS vulnerability in Rockwell Automation ControlLogix and GuardLogix controllers that can cause a major nonrecoverable fault (MNRF) and device restart. Affected products include ControlLogix 5570 (firmware 20.x; corrected in v33.016, 34.013, 35.012, 36.011 and later) and...
CVE-2024-21916 Rockwell Automation Denial-of-service Vulnerability in ICE1 Controller
A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If exploited, the product could potentially experience a major nonrecoverable fault MNRF. The device will restart itself to recover from the MNRF...
CVE-2024-21916 Rockwell Automation Denial-of-service Vulnerability in ICE1 Controller
A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If exploited, the product could potentially experience a major nonrecoverable fault MNRF. The device will restart itself to recover from the MNRF...
CVE-2024-21917 Rockwell Automation FactoryTalk® Service Platform Service Token Vulnerability
A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows a malicious user to obtain the service token and use it for authentication on another FTSP directory. This is due to the lack of digital signing between the FTSP service token and directory. If exploited, a...
CVE-2024-21917
CVE-2024-21917 affects Rockwell Automation’s FactoryTalk Service Platform. The root cause is improper verification of cryptographic signatures: FTSP service tokens are not digitally signed against the target directory, enabling a malicious user to obtain a service token and use it for authenticat...
CVE-2024-21917 Rockwell Automation FactoryTalk® Service Platform Service Token Vulnerability
A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows a malicious user to obtain the service token and use it for authentication on another FTSP directory. This is due to the lack of digital signing between the FTSP service token and directory. If exploited, a...
OAS Engine Deep Dive: Abusing low-impact vulnerabilities to escalate privileges
Open Automation Software recently released patches for multiple vulnerabilities in their OAS Engine. Cisco Talos publicly disclosed these issues after working with Open Automation Software to ensure that patches were available for users. Now that a fix has been released with Version 19, we want t...
Qualys Patch Management: A Review of New Features in 2023 for Faster Elimination of Cyber Risk
The recent debut of Qualys’ Enterprise TruRisk Platform promises three key benefits: measuring, communicating, and eliminating cyber risk across the extended enterprise. Qualys Patch Management plays a pivotal role in this process towards the rapid elimination of cyber risk. Our focus during 2023...
Rockwell Automation ControlLogix 缓冲区错误漏洞
Rockwell Automation ControlLogix and GuardLogix are both Rockwell Automation controllers. A denial of service vulnerability exists in Rockwell Automation ControlLogix and GuardLogix, which can be exploited by an attacker to cause a denial of service condition by sending a specially crafted reques...
The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces lies in buffer overflows in the stack. This allows an attacker to execute arbitrary code.
The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces is related to buffer overflows in the stack during syntax analysis of the wTitleTextLen field. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary code...
China-Linked Hackers Target Myanmar's Top Ministries with Backdoor Blitz
The China-based threat actor known as Mustang Panda is suspected to have targeted Myanmar's Ministry of Defence and Foreign Affairs as part of twin campaigns designed to deploy backdoors and remote access trojans. The findings come from CSIRT-CTI, which said the activities took place in November...