205 matches found
Schneider Electric ConneXium Network Manager Software 数据伪造问题漏洞
Schneider Electric ConneXium Network Manager Software Schneider Electric Cnm is an industrial Ethernet network management software from Schneider Electric, France. A security vulnerability exists in the Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22/21/20 prior to version 03.23 and t...
Schneider Electric ConneXium Network Manager Software 安全漏洞
Schneider Electric ConneXium Network Manager Software Schneider Electric Cnm is an industrial Ethernet network management software from Schneider Electric, France. A security vulnerability exists in the Schneider Electric ConneXium Network Manager Software prior to version 03.23 and the Belden...
CVE-2021-30063: Undefined Security Weakness
On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can cause an OPC enforcer denial of service...
CVE-2021-30062: Undefined Security Weakness
On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can bypass the OPC enforcer...
CVE-2021-30066: Improper Verification of Cryptographic Signature
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an arbitrary firmware image can be loaded because firmware signature verification for a USB stick can be bypassed. NOTE: this issue exists because of an...
CVE-2021-30065: Undefined Security Weakness
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, crafted ModBus packets can bypass the ModBus enforcer. NOTE: this issue exists because of an incomplete fix of CVE-2017-11401...
CVE-2021-30064: Use of Hard-coded Credentials
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an SSH login can succeed with hardcoded default credentials if the device is in the uncommissioned state...
The vulnerability of Belden Hirschmann HiOS and HiSecOS operating systems lies in the insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.
The vulnerability of Belden Hirschmann HiOS and HiSecOS lies in the insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Belden HiOS授权问题漏洞
Belden HiOS is an operating system for Ethernet switches from Belden, Inc. A security vulnerability exists in Hirschmann HiOS 07.1.01, 07.1.02, and 08.1.00 through 08.5.xx and HiSecOS 03.3.00 through 03.5.01, which could be exploited by a remote attacker to alter the credentials of an existing us...
The vulnerability of the HiOS operating system with respect to Belden Hirschmann’s OS2, RSP, and RSPE network switches allows a hacker to cause maintenance failures.
The vulnerability of the HiOS operating system regarding Belden Hirschmann’s OS2, RSP, and RSPE network switches is related to resource release errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...
Belden HiOS and HiSecOS Buffer Overflow Vulnerabilities
Belden HiOS and Belden HiSecOS are both products of Belden, Inc. Belden HiOS is an operating system for Ethernet switches and Belden HiSecOS is an operating system for industrial security routers. A buffer overflow vulnerability exists in Belden HiOS and HiSecOS. The vulnerability originates when...
The vulnerability of the HTTP(S) software control modules of Belden Hirschmann HiOS and Belden Hirschmann HiSecOS allows a perpetrator to gain unauthorized access to confidential information.
The vulnerability of the HTTPS software control modules of Belden Hirschmann HiOS and Belden Hirschmann HiSecOS relates to errors in handling authentication requests. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to sensitive information through specially...
The vulnerability of the web interface of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS allows a intruder to gain unauthorized access and intercept web sessions.
The vulnerability of Belden Hirschmann’s network switch web interfaces for models series RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS is related to improper session management. Exploiting this vulnerability can allow an attacker to gain unauthorized access and intercept web sessions...
The vulnerability of the web interface of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS allows a perpetrator to carry out a brute-force attack.
The vulnerability of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS lies in the insufficient limitation on authentication attempts. Exploiting this vulnerability allows a remote attacker to execute a brute-force attack...
The vulnerability of the web interface of Belden Hirschmann’s network switches of the RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS series allows a hacker to disclose protected information.
The vulnerability of the web interface of Belden Hirschmann’s network switches series RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS is related to errors in processing GET requests. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a GET...
The vulnerability of the web interface of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS allows a perpetrator to carry out a “man-in-the-middle” attack.
The vulnerability of web interfaces of network switches from Belden Hirschmann, series RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS, is related to weak encryption. Exploiting this vulnerability can allow a remote attacker to execute a “man-in-the-middle” attack...
The vulnerability of the web interface of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS allows a perpetrator to execute a type of attack known as “man-in-the-middle” attack.
The vulnerability of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS lies in the transmission of confidential information in the form of plain text. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attac...
User Forgery Vulnerability in Multiple Belden Hirschmann Switch Products
Belden Hirschmann RS, etc. are switch products of Belden USA. A security vulnerability exists in the web interface in several Belden Hirschmann switch products. An attacker could exploit the vulnerability to spoof legitimate users...
Man-in-the-middle attack vulnerability in multiple Belden Hirschmann switch products (CNVD-2018-04783)
Belden Hirschmann RS, etc. are switch products of Belden USA. A security vulnerability exists in the web interface of several Belden Hirschmann switch products. An attacker could exploit this vulnerability to obtain sensitive information by performing a man-in-the-middle attack...
Session Hijacking Vulnerability in Multiple Belden Hirschmann Switch Products
Belden Hirschmann RS, etc. are switch products of Belden USA. A session fixation vulnerability exists in the web interface in several Belden Hirschmann switch products. An attacker can exploit this vulnerability to hijack a web session...