Red Hat Ansible automation controller 安全漏洞

Red Hat Ansible automation controller is a centralized management tool from Red Hat, Inc. It is used to manage inventory, initiate and schedule workflows, track changes, and integrate reporting with a centralized user interface. A security vulnerability exists in Red Hat Ansible automation...

Red Hat Ansible automation controller 跨站脚本漏洞

Red Hat Ansible automation controller is a centralized management tool from Red Hat, Inc. It is used for managing inventory, initiating and scheduling workflows, tracking changes, and integrating reports with a centralized user interface. A security vulnerability exists in the Red Hat Ansible...

PTC KEPServerEX

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: PTC Equipment: KEPServerEX Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could result in the affected device crashing. 3. TECHNICAL...

CVE-2023-3242

Improper initialization implementation in Portmapper used in B&R Industrial Automation Automation Runtime G4.93 allows unauthenticated network-based attackers to cause permanent denial-of-service conditions...

Design/Logic Flaw

Allocation of Resources Without Limits or Throttling, Improper Initialization vulnerability in B&R Industrial Automation B&R Automation Runtime allows Flooding, Leveraging Race Conditions.This issue affects B&R Automation Runtime: G4.93...

CVE-2023-3242

Improper initialization implementation in Portmapper used in B&R Industrial Automation Automation Runtime G4.93 allows unauthenticated network-based attackers to cause permanent denial-of-service conditions...

CVE-2023-3242

The CVE-2023-3242 issue concerns B&R Automation Runtime’s Portmapper. Affected product: B&R Industrial Automation Automation Runtime (prior to G4.93). Vulnerable component: Portmapper service with improper initialization. Impact: unauthenticated network-based attackers can cause permanent denial-...

PT-2023-4115 · B&R Industrial Automation · B&R Automation Runtime

Name of the Vulnerable Software and Affected Versions: B&R Automation Runtime versions prior to G4.93 Description: The issue is related to improper initialization implementation in the Portmapper service used in B&R Industrial Automation Automation Runtime. This allows unauthenticated network-bas...

B&R Industrial Automation GmbH Runtime 安全漏洞

B&R Industrial Automation GmbH Runtime is a major component of the AS from B&R Industrial Automation, Austria. A security vulnerability exists in B&R Industrial Automation GmbH Runtime versions prior to G4.93, which stems from an improper initialization issue that results in multiple services bei...

Security Bulletin: IBM WebSphere Application Server traditional is vulnerable to spoofing when using Web Server Plug-ins (CVE-2022-39161)

Summary WebSphere Application Server is used by IBM Tivoli System Automation Application Manager and is vulnerable to spoofing via the optional and separately installable Web Server Plug-ins when used. Required fixes for affected WebSphere Application Server have been published in the security...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2023-24966)

Summary IBM WebSphere Application Server is used by IBM Tivoli System Automation Application Manager and is vulnerable to cross-site scripting in the Admin Console. Required fixes for affected WebSphere Application Server has been published in the security bulletin links below. Vulnerability...

The vulnerability of Rockwell Automation’s FactoryTalk Transaction Manager software, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of Rockwell Automation’s FactoryTalk Transaction Manager software-related manufacturing process management systems is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Rockwell Automation ThinManager ThinServer

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : ThinManager ThinServer Vulnerability : Relative Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote actor to leverage...

July 25, 2023—KB5028245 (OS Build 22000.2245) Preview

None None...

IBOS SQL注入漏洞

IBOS is a collaborative office management system. A SQL injection vulnerability exists in IBOS OA version 4.5.5, which originates from the presence of an unknown function in the file /?r=recruit/resume/edit&op=status in the component Interview Handler, which leads to a sql injection via the...

Security Bulletin: Multiple vulnerabilities affect the embedded Content Navigator in Business Automation Workflow - CVE-2023-24998, 254437

Summary The embedded Content Navigator in IBM Business Automation Workflow is affected by multiple vulnerabilities. Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerable to a denial of service, caused by not limit the number of request parts t...

The vulnerability of the microprogramming software for Rockwell Automation communication modules 1756-EN2T, 1756-EN2TK, 1756-EN2TXT, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT, 1756-EN2TR, 1756-EN2TRK, 1756-EN2TRXT, 1756-EN2F, 1756-EN2FK, 1756-EN3TR, 1756-EN3TRK, 1756-EN4TR, 1756-EN4TRK, and 1756-EN4TRXT controllers from the Allen-Bradley ControlLogix series allows a intruder to cause a service failure.

The vulnerability of the microprogrammed software in the communication modules of Rockwell Automation’s controllers models 1756-EN2T, 1756-EN2TK, 1756-EN2TXT, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT, 1756-EN2TR, 1756-EN2TRK, 1756-EN2TRXT, 1756-EN2F, 1756-EN2FK, 1756-EN3TR, 1756-EN3TRK, 1756-EN4TR,...

IBM Robotic Process Automation Information Disclosure Vulnerability (CNVD-2023-79713)

IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. IBM Robotic Process Automation suffers from an information disclosure vulnerability that stems from the program's tendency to disclose server version information, which can be exploite...

CISA Releases One Industrial Control Systems Advisory

CISA released one Industrial Control Systems ICS advisory on July 20, 2023. This advisory provides timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-201-01 Schneider Electric EcoStruxure Products, Modicon PLCs, and Programmable Automation...

Rockwell Automation Kinetix 5700 Denial of Service Vulnerability

The Rockwell Automation Kinetix 5700 is the first Kinetix drive from Rockwell Automation designed with an external common AC/DC bus connection system. It reduces hardware requirements and allows for seamless expansion, using a single platform for single- or multi-axis systems. A denial of service...