52 matches found
Schneider Electric Modicon Controllers (Update A)
GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...
Schneider Electric Easergy Studio
GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...
CVE-2024-2472
The LatePoint Plugin plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the 'startorusesessionforcustomer' function in all versions up to and including 4.9.9. This makes it possible for unauthenticated attackers to view...
WordPress Plugin LatePoint Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
qualitycabinetsandcounters.com Cross Site Scripting vulnerability OBB-3906719
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
[SECURITY] Fedora 37 Update: attract-mode-2.6.2-6.fc37
Attract-Mode is a graphical frontend for command line emulators such as MAME, MESS, and Nestopia. It hides the underlying operating system and is intended to be controlled with a joystick, gamepad or spin dial, making it ideal for use in arcade cabinet setups...
Rittal CMC III Access systems
1. EXECUTIVE SUMMARY CVSS v3 4.8 Vendor: Rittal Equipment: CMC III Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to open control cabinets secured with Rittal locks. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS Rittal...
CVE-2022-40633
A malicious actor can clone access cards used to open control cabinets secured with Rittal CMC III locks...
Design/Logic Flaw
A malicious actor can clone access cards used to open control cabinets secured with Rittal CMC III locks...
CVE-2022-40633
CVE-2022-40633 affects Rittal CMC III control cabinet locks. The root issue is Improper Access Control, enabling a malicious actor to clone access cards to open cabinets. Public sources describe the impact as unauthorized physical access to secured cabinets, with CVSSv3 base metrics (AV: Physical...
CVE-2022-40633 Rittal CMC III Improper Access Control
A malicious actor can clone access cards used to open control cabinets secured with Rittal CMC III locks...
CVE-2022-40633: Undefined Security Weakness
A malicious actor can clone access cards used to open control cabinets secured with Rittal CMC III locks...
多款Lenze产品授权问题漏洞
Lenze cabinet c520 and others are a cabinet from Lenze Germany. An authorization issue vulnerability exists in the Lenze cabinet c520 versions V01.07.00.2757 through V01.08.01.3021, cabinet c550 versions V01.07.00.2757 through V01.08.01.3021, and cabinet c750 versions V01.07.00.2757 through V01.0...
HPE Cray Legacy Shasta 授权问题漏洞
HPE Cray Legacy Shasta is a supercomputer from Wise and Technology HPE. It can handle the new large-scale convergent modeling that is currently available. A security vulnerability exists in the HPE Cray Legacy Shasta that can be remotely exploited by an attacker to allow bypassing authentication,...
Siemens RUGGEDCOM Devices Information Disclosure Vulnerability
RUGGEDCOM ROS-based devices are typically switches and serial-to-Ethernet devices used to connect equipment that operates in harsh environments, such as electric utility substations and traffic control cabinets. An information disclosure vulnerability exists in Siemens RUGGEDCOM Devices, which ca...
Siemens RUGGEDCOM ROX Device Denial of Service Vulnerability
ROX-based VPN endpoints and firewall appliances are used to connect devices that operate in harsh environments, such as electric utility substations and transportation control cabinets. A denial of service vulnerability exists in the Siemens RUGGEDCOM ROX devices, which originates from a dump cra...
batonrougecustomcabinets.com Cross Site Scripting vulnerability OBB-1409881
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Schneider Electric Modicon Controllers (Update A)
GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...
Schneider Electric GUIcon Eurotherm
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low skill level to exploit Vendor : Schneider Electric Equipment : Eurotherm by Schneider Electric GUIcon Vulnerabilities : Type Confusion, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities may allow an...
