CVE-2022-3228: Stack-based Buffer Overflow

Using custom code, an attacker can write into name or description fields larger than the appropriate buffer size causing a stack-based buffer overflow on Host Engineering H0-ECOM100 Communications Module Firmware versions v5.0.155 and prior. This may allow an attacker to crash the affected device...

Host Engineering H0-ECOM100 Communications Module 缓冲区错误漏洞

Host Engineering H0-ECOM100 Communications Module is a Host Engineering communications module from Host Engineering, Inc. A security vulnerability exists in the Host Engineering H0-ECOM100 Communications Module. An attacker could exploit the vulnerability to cause a stack-based buffer overflow by...

PT-2021-7689

Name of the Vulnerable Software and Affected Versions Triconex Model 3009/3009X MP affected versions not specified Tricon Communications Module affected versions not specified Description The issue is related to the receipt of malformed TriStation packets, which can be exploited to cause a denial...

PT-2021-7686

Name of the Vulnerable Software and Affected Versions Triconex Model 3009 MP versions 11.3.x Description The issue is related to an improper check for unusual or exceptional conditions, which could cause a module reset when the Triconex Communications Module TCM receives malformed TriStation...

PT-2021-7688

Name of the Vulnerable Software and Affected Versions Triconex Model 3009/3009X MP affected versions not specified Tricon Communications Module affected versions not specified Description The issue is related to insufficient exception handling in the firmware of Triconex Model 3009/3009X MP and...

PT-2021-7687

Name of the Vulnerable Software and Affected Versions Triconex Model 3009/3009X MP affected versions not specified Tricon Communications Module affected versions not specified Description The issue is related to insufficient exception handling in the firmware of Triconex Model 3009/3009X MP and...

PT-2021-7685

Name of the Vulnerable Software and Affected Versions Triconex Model 3009/3009X MP affected versions not specified Tricon Communications Module affected versions not specified Description The issue is related to insufficient exception handling in the firmware of Triconex Model 3009/3009X MP and...

The vulnerability of the Tricon Communications Module, related to the lack of protection for operational data, allows attackers to disclose the protected information.

The vulnerability of the Tricon Communications Module is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the Tricon Communications Module, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of the Tricon Communications Module is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

PT-2020-2065

Name of the Vulnerable Software and Affected Versions Tricon Communications Module versions 10.3.x through 10.4.x Description A vulnerability could cause TCM modules to reset when under high network load. This issue is related to an uncontrolled resource consumption. Exploitation of the...

Rockwell Automation 1756-DH485/A ControlLogix DH-485 Communications Module

Binary data 752955.prm...

CVE-2017-12726

A Use of Hard-coded Password issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. Telnet on the pump uses hardcoded credentials, which can be used if the pump is configured to allow external communications. Smiths Medical assesses that i...

Out-of-bounds

An Out-of-bounds Read issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump reads memory out of bounds, causing the communications module to crash. Smiths Medical assesses that the crash of the...

CVE-2017-12722

An Out-of-bounds Read issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump reads memory out of bounds, causing the communications module to crash. Smiths Medical assesses that the crash of the...

CVE-2017-12726

A Use of Hard-coded Password issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. Telnet on the pump uses hardcoded credentials, which can be used if the pump is configured to allow external communications. Smiths Medical assesses that i...

PT-2018-5450

Name of the Vulnerable Software and Affected Versions: Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump versions 1.1, 1.5, 1.6 Description: An Out-of-bounds Read issue was discovered in the pump, where a third-party component reads memory out of bounds, causing the communications modu...

CVE-2017-12722: Out-of-bounds Read

An Out-of-bounds Read issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump reads memory out of bounds, causing the communications module to crash. Smiths Medical assesses that the crash of the...

PT-2018-5454

Name of the Vulnerable Software and Affected Versions: Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump versions 1.1, 1.5, 1.6 Description: A Use of Hard-coded Password issue was discovered, where Telnet on the pump uses hardcoded credentials. This can be exploited if the pump is...

CVE-2017-12726: Use of Hard-coded Credentials

A Use of Hard-coded Password issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. Telnet on the pump uses hardcoded credentials, which can be used if the pump is configured to allow external communications. Smiths Medical assesses that i...