19306 matches found
Hackers Bombard Open Source Repositories with Over 144,000 Malicious Packages
NuGet, PyPi, and npm ecosystems are the target of a new campaign that has resulted in over 144,000 packages being published by unknown threat actors. "The packages were part of a new attack vector, with attackers spamming the open source ecosystem with packages containing links to phishing...
Cloud Audit: Compliance + Automation
Setting your own standard Today’s regulatory environment is incredibly fractured and extensive. Depending on the industry—and the part of the world your business and/or security organization resides in—you may be subject to several regulatory compliance standards. Adding to the complexity, there ...
Cyber Signals: Risks to critical infrastructure on the rise
Today, the third edition of Cyber Signals was released spotlighting security trends and insights gathered from Microsoft’s 43 trillion daily security signals and 8,500 security experts. In this edition, we share new insights on wider risks that converging IT, Internet of Things IoT, and operation...
Siemens Industrial Product Denial of Service Vulnerability (CNVD-2022-87983)
SIMATIC Drive Controllers for the automation of production machines combine the functionality of SIMATIC S7-1500 CPUs with that of SINAMICS S120 drive controls.SIMATIC ET 200SP Open Controller is the PC-based version of the SIMATIC S7-1500 controller. Includes optional visualization features and...
vSphere_selfuse 安全漏洞
vSphereselfuse is a vSphere automation attempt project by Henry Sun Personal Developer. A security vulnerability exists in vSphereselfuse commit number: 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749, which stems from the fact that it allows an attacker to execute a backdoor through the code of a reque...
Siemens APOGEE/TALON Field Panels Privilege Management Vulnerability
APOGEE PXC Modular and Compact Series Direct Digital Control DDC devices, part of the APOGEE Automation System. TALON TC Modular and Compact Series Direct Digital Control DDC devices, part of the TALON Automation System. Siemens APOGEE/TALON Field Panels contain a privilege management vulnerabili...
Siemens SICAM PAS/PQS Uncontrolled Search Path Element Vulnerability
Siemens SICAM PAS/PQS is a software from Siemens with an operating system for energy automation and power quality. A security vulnerability exists in Siemens SICAM PAS/PQS versions prior to V7.0 that stems from a failure to properly protect the containing folder. An attacker can exploit the...
CVE-2022-2660
Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded cryptographic key which could allow an attacker to decrypt sensitive data and compromise the machine...
Hardcoded credentials
Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded cryptographic key which could allow an attacker to decrypt sensitive data and compromise the machine...
CVE-2022-2660
Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded cryptographic key which could allow an attacker to decrypt sensitive data and compromise the machine...
CVE-2022-2660
CVE-2022-2660 affects Delta Electronics DIALink (Industrial Automation server) v1.4.0.0 and earlier. The vulnerability stems from the use of a hard-coded cryptographic key, which could allow an attacker to decrypt sensitive data and compromise the machine. Impact is high/critical depending on met...
CVE-2022-2660
Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded cryptographic key which could allow an attacker to decrypt sensitive data and compromise the machine...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation for Multiplatforms - April 2021 CPU (CVE-2021-2163)
Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, Version 8 used by v4.1.0.4 to 4.1.0.7 of IBM Tivoli System Automation for Multiplatforms. These issues were disclosed as part of the IBM Java SDK updates in April 2021. Vulnerability Details Refer to the security...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation Application Manager (CVE-2021-2163)
Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition used by IBM Tivoli System Automation Application Manager. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|---...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Tivoli System Automation Application Manager (CVE-2022-35282)
Summary Server-side request forgery vulnerability in WebSphere Application Server has been addressed in the security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM Tivol...
PT-2022-27389 · Siemens · Siprotec 5
Name of the Vulnerable Software and Affected Versions: SIPROTEC 5 6MD84 CP300 versions prior to V9.50 SIPROTEC 5 6MD85 CP200 versions SIPROTEC 5 6MD85 CP300 versions prior to V9.50 SIPROTEC 5 6MD86 CP200 versions SIPROTEC 5 6MD86 CP300 versions prior to V9.50 SIPROTEC 5 6MD89 CP300 versions prior...
Siemens SICAM PAS/PQS 代码问题漏洞
Siemens SICAM PAS/PQS is a software from Siemens with an operating system for energy automation and power quality. A security vulnerability exists in Siemens SICAM PAS/PQS versions prior to V7.0 that stems from a failure to properly protect the containing folder. An attacker can exploit the...
部分Siemens产品 安全漏洞
APOGEE PXC Modular and Compact Series Direct Digital Control DDC devices, part of the APOGEE Automation System. TALON TC Modular and Compact Series Direct Digital Control DDC devices, part of the TALON Automation System. Siemens APOGEE/TALON Field Panels contain a privilege management vulnerabili...
Siemens SICAM PAS
1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SICAM PAS Vulnerabilities: Uncontrolled Search Path Element, Improper Validation of Specified Type of Input, Cleartext Transmission of Sensitive Information 2. RISK EVALUATION...
