237 matches found
Siemens devices using the PROFINET Discovery and Configuration Protocol (Update G)
CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...
Siemens SIMATIC HMI Denial of Service Vulnerability
SIMATIC HMI is an industrial device from Siemens, Germany.SIMATIC HMI panels are used for operator control and monitoring of machines and equipment. A denial of service vulnerability in the Siemens SIMATIC HMI Multi-Panel and HMI Mobile Panels, as well as in the S7-300/S7-400 devices, allows an...
Denial of service vulnerability in several Siemens industrial products (CNVD-2017-06151)
SIMATIC CP, SIMATIC RF600, SCALANCE W700, etc. are industrial automation products of Siemens, Germany. A denial of service vulnerability exists in several Siemens industrial devices. Allows an attacker to launch a denial of service attack via specially crafted PROFINET DCP packets sent on the loc...
ICSA-17-129-01 Siemens devices using the PROFINET Discovery and Configuration Protocol (Update K)
1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Improper Input Validation 2. UPDATE INFORMATION This updated advisory is a...
PT-2017-3762 · Siemens · Profinet Dcp
Name of the Vulnerable Software and Affected Versions: Siemens PROFINET DCP affected versions not specified Description: The issue is related to insufficient input validation in the PROFINET DCP software, which can be exploited by an attacker using specially crafted PROFINET DCP broadcast packets...
Cisco IOS DHCP Denial of Service Vulnerability
Cisco IOS is an operating system developed by Cisco for its network devices. A security vulnerability exists in the DHCP client implementation of Cisco IOS. A remote attacker can exploit this vulnerability to send specially crafted DHCP messages to conduct denial-of-service attacks...
Zyxel / Eir D1000 DSL Modem NewNTPServer Command Injection Over TR-064 Exploit
Broadband DSL modems manufactured by Zyxel and distributed by some European ISPs are vulnerable to a command injection vulnerability when setting the 'NewNTPServer' value using the TR-64 SOAP-based configuration protocol. In the tested case, no authentication is required to set this value on...
Zyxel/Eir D1000 DSL Modem NewNTPServer Command Injection Over TR-064
require 'msf/core' class MetasploitModule 'Zyxel/Eir D1000 DSL Modem NewNTPServer Command Injection Over TR-064', 'Description' = %q Broadband DSL modems manufactured by Zyxel and distributed by some European ISPs are vulnerable to a command injection vulnerability when setting the 'NewNTPServer'...
Cisco NX-OS Software Denial of Service Vulnerability (CNVD-2016-09010)
Cisco NX-OS is a data center-class operating system. A denial of service vulnerability exists in Cisco NX-OS Software's DHCPv4 relay agent and intelligent relay agent implementations. It could allow an unauthenticated, remote attacker to cause a denial of service on an affected device...
The vulnerabilities of KW Multiprog and KW ProConOS in programming and debugging tools allow attackers to execute arbitrary commands.
The vulnerability of KW Multiprog and KW ProConOS programming and debugging tools is related to errors in managing registration data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the PLK configuration protocol...
[SECURITY] Fedora 23 Update: dhcp-4.3.3-10.P1.fc23
DHCP Dynamic Host Configuration Protocol...
CVE-2016-1427
The System Configuration Protocol SCP core messaging interface in Cisco Prime Network Registrar 8.2 before 8.2.3.1 and 8.3 before 8.3.2 allows remote attackers to obtain sensitive information via crafted SCP messages, aka Bug ID CSCuv35694...
Cisco Prime Network Registrar System Configuration Protocol Information Disclosure Vulnerability
A vulnerability in the System Configuration Protocol SCP core messaging interface of the Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability ...
[SECURITY] Fedora 22 Update: dhcp-4.3.2-8.fc22
DHCP Dynamic Host Configuration Protocol...
[SECURITY] Fedora 24 Update: dhcp-4.3.4-1.fc24
DHCP Dynamic Host Configuration Protocol...
[SECURITY] Fedora 23 Update: dhcp-4.3.3-9.P1.fc23
DHCP Dynamic Host Configuration Protocol...
[SECURITY] Fedora 22 Update: dhcp-4.3.2-7.fc22
DHCP Dynamic Host Configuration Protocol...
[SECURITY] Fedora 23 Update: dhcp-4.3.3-8.P1.fc23
DHCP Dynamic Host Configuration Protocol...
Debian Security Advisory DSA 3442-1 (isc-dhcp - security update)
It was discovered that a maliciously crafted packet can crash any of the isc-dhcp applications. This includes the DHCP client, relay, and server application. Only IPv4 setups are affected. OpenVAS Vulnerability Test $Id: deb3442.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from adviso...