PT-2022-6990

Name of the Vulnerable Software and Affected Versions SolarView Compact version 6.00 Description The issue exists due to the failure to neutralize special elements used in an operating system command in the conf mail.php component of the SolarView Compact device. This can allow an attacker to...

PT-2022-25605

Name of the Vulnerable Software and Affected Versions SolarView Compact version 6.00 Description A command injection issue was discovered via the network test.php file. Recommendations For SolarView Compact version 6.00, as a temporary workaround, consider restricting access to the network test.p...

CVE-2022-29298: Improper Limitation of a Pathname to a Restricted Directory

SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal...

PT-2022-19525 · Unknown · Solarview Compact

Name of the Vulnerable Software and Affected Versions: SolarView Compact version 6.00 Description: The issue allows attackers to access sensitive files via directory traversal. Recommendations: For SolarView Compact version 6.00, consider restricting access to sensitive files as a temporary...

Contec SolarView Compact operating system command injection vulnerability

Contec SolarView Compact is an application system from Contec Japan. It provides photovoltaic power generation measurement system. Contec SolarView Compact version 6.00 suffers from an operating system command injection vulnerability that originates from a command injection point in the...

CVE-2022-29303

SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via confmail.php. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2022-29303: Improper Neutralization of Special Elements used in an OS Command

SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via confmail.php...

Contec SolarView Compact path traversal vulnerability

Contec SolarView Compact is an application system from Contec Japan. It provides photovoltaic power generation measurement system. A security vulnerability exists in Contec SolarView Compact version 6.00, which can be exploited by attackers to obtain sensitive files...

Vulnerability in SICK Gateways for Flexi Soft, Flexi Compact, SICK EFI Gateway UE4740, SICK microScan3 and outdoorScan3

The PSIRT received a report about a vulnerability in some gateways for Flexi Soft, Flexi Compact, EFI gateway UE4740, microScan3 and the outdoorScan3. The vulnerability is classified as a denial-of-service vulnerability and results from a malformed UDP package. It is recommended to implement the...

ControlLogix PLC Code Generation

The vulnerability of microprogrammed software in programmable logic controllers such as ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, CompactLogix 5480, and Compact GuardLogix 5380 lies in improper code generation. Exploiting this vulnerability allows an intruder to implant code into the...

Siemens PROFINET Stack Integrated on Interniche Stack Denial of Service Vulnerability

The SIMATIC S7-400 CPU series is designed for process control in industrial environments.The SIMATIC S7-300 CPU series is designed for discrete and continuous control in industrial environments.The SIMATIC S7-1500 CPU series is designed for discrete and continuous control in industrial...

Input validation

Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service...

CVE-2021-22277: Improper Input Validation

Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service...

PT-2022-2353 · Rockwell Automation · Compactlogix 5480 +5

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Studio 5000 Logix Designer all versions ControlLogix 5580 affected versions not specified GuardLogix 5580 affected versions not specified CompactLogix 5380 affected versions not specified CompactLogix 5480 affected version...

Rockwell Automation Studio 5000 Logix Designer

1. EXECUTIVE SUMMARY CVSS v3 7.7 ATTENTION: Low attack complexity Vendor: Rockwell Automation Equipment: Studio 5000 Logix Designer Vulnerability: Code Injection 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to download a modified program to the...

Rockwell Automation Logix Controllers

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: Logix Controllers Vulnerability: Inclusion of Functionality from Untrusted Control Sphere 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an...

Windows CD-ROM Driver Privilege Escalation

The vulnerability of the Microsoft Windows operating system’s CD-ROM driver is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

compact-brake.com Cross Site Scripting vulnerability OBB-2386159

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-22277

Improper Input Validation vulnerability in ABB 800xA, Control Software for AC 800M, Control Builder Safe, Compact Product Suite - Control and I/O, ABB Base Software for SoftControl allows an attacker to cause the denial of service...

Rockwell Automation Allen-Bradley CompactLogix and Compact GuardLogix Improper Input Validation (CVE-2017-9312)

Improperly implemented option-field processing in the TCP/IP stack on Allen-Bradley L30ERMS safety devices v30 and earlier causes a denial of service. When a crafted TCP packet is received, the device reboots immediately. This plugin only works with Tenable.ot. Please visit...