Lucene search
+L

666 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/14 12:00 a.m.•10 views

CVE-2022-29593: Authentication Bypass by Capture-replay

relaycgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post requests without the need for authentication or a valid signed/authorized request...

5.9CVSS6.2AI score0.14302EPSS
SaveExploits5References3
BDU FSTEC
BDU FSTEC
•added 2022/07/11 12:00 a.m.•32 views

Omron NJ/NX Automation Controller Authentication Bypass

The vulnerability of Microprogrammed Software in Omron NJ/NX automation controllers lies in the ability to bypass the authentication process by using capture-replay techniques to intercept and replay captured parameters. Exploiting this vulnerability allows a malicious actor to trigger malfunctio...

7.6CVSS7.5AI score0.01245EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/07/11 12:00 a.m.•29 views

Omron NJ/NX Automation Controller

The vulnerability of the communication functions between Omron NJ/NX automation controllers, the Omron Sysmac Studio automation software, and the programmable terminal Omron NA lies in the ability to bypass the authentication process by using capture-replay techniques for intercepted parameters...

6.8CVSS7.5AI score0.01873EPSS
SaveExploits0References4Affected Software8
osv_cve
osv_cve
•added 2022/07/04 2:15 a.m.•23 views

CVE-2022-33208

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software...

8.1CVSS7.3AI score0.01873EPSS
SaveExploits0References2
NVD
NVD
•added 2022/07/04 2:15 a.m.•44 views

CVE-2022-33971

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow ...

8.3CVSS0.01245EPSS
SaveExploits0References2
NVD
NVD
•added 2022/07/04 2:15 a.m.•48 views

CVE-2022-33208

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software...

8.1CVSS0.01873EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/07/04 2:15 a.m.•8 views

CVE-2022-33208

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software...

8.1CVSS5.8AI score0.01873EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2022/07/04 2:15 a.m.•23 views

CVE-2022-33971

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow ...

7.5CVSS7.2AI score0.01245EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/07/04 2:15 a.m.•17 views

CVE-2022-33971

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow ...

7.5CVSS6AI score0.01245EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2022/07/04 2:15 a.m.•28 views

Authentication flaw

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software...

6.8CVSS8AI score0.01873EPSS
SaveExploits0References2Affected Software57
Vulnrichment
Vulnrichment
•added 2022/07/04 1:50 a.m.•11 views

CVE-2022-33971

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow ...

7.2AI score0.01245EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/07/04 1:50 a.m.•62 views

CVE-2022-33971

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow ...

7.8AI score0.01245EPSS
SaveExploits0References2
CVE
CVE
•added 2022/07/04 1:50 a.m.•108 views

CVE-2022-33971

CVE-2022-33971 affects Omron NJ/NX-series Machine Automation Controllers. An adjacent attacker who can analyze the communication between the controller and internal software may bypass authentication via capture-replay, potentially causing a DoS or enabling execution of a malicious program. Affec...

8.3CVSS7.5AI score0.01245EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/07/04 1:50 a.m.•126 views

CVE-2022-33208

CVE-2022-33208 is an authentication bypass by capture-replay affecting Omron NJ/NX-series Machine Automation Controllers (NJ 1.48 and earlier; NX7 1.28 and earlier; NX1 1.48 and earlier), Sysmac Studio (≤1.49), and NA-series PT runtimes (NA5-15W/12W/9W/7W ≤1.15). A remote attacker who can analyze...

8.1CVSS7.9AI score0.01873EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/07/04 1:50 a.m.•71 views

CVE-2022-33208

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software...

8.2AI score0.01873EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/04 12:00 a.m.•5 views

CVE-2022-33971: Authentication Bypass by Capture-replay

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow ...

8.3CVSS7.5AI score0.01245EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/04 12:00 a.m.•7 views

CVE-2022-33208: Authentication Bypass by Capture-replay

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software...

8.1CVSS7.1AI score0.01873EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/29 12:00 a.m.•12 views

CVE-2022-30467: Authentication Bypass by Capture-replay

Joy ebike Wolf Manufacturing year 2022 is vulnerable to Denial of service, which allows remote attackers to jam the key fob request via RF...

6.8CVSS6.8AI score0.00858EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/21 12:00 a.m.•2 views

PT-2022-3479

Name of the Vulnerable Software and Affected Versions Machine automation controller NJ series versions 1.48 and earlier Machine automation controller NX7 series versions 1.28 and earlier Machine automation controller NX1 series versions 1.48 and earlier Automation software 'Sysmac Studio' version...

8.1CVSS0.01873EPSS
SaveExploits0References7
NVD
NVD
•added 2022/06/07 9:15 p.m.•29 views

CVE-2022-30466

joyebike Joy ebike Wolf Manufacturing year 2022 is vulnerable to Authentication Bypass by Capture-replay...

6.5CVSS0.00654EPSS
SaveExploits1References1
Rows per page
Query Builder