Schneider Electric Easergy Builder Code Issue Vulnerability

Schneider Electric Easergy Builder is a set of configuration software for Easergy remote terminal units and controllers from Schneider Electric, France. A code issue vulnerability exists in Schneider Electric Easergy Builder version 1.7.23 and earlier, which stems from the presence of an...

FANUC Robot Controllers Out-of-Bounds Write (CVE-2021-32998)

The FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code. INIT START/restore from backup required. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mo...

FANUC Robot Controllers Integer Coercion Error (CVE-2021-32996)

The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to crash. A restart is required. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable,...

April 11, 2023—KB5025230 (OS Build 20348.1668)

None None...

Remote code execution

codefever before 2023.2.7-commit-b1c2e7f was discovered to contain a remote code execution RCE vulnerability via the component /controllers/api/user.php...

CVE-2023-26817: Improper Control of Generation of Code

codefever before 2023.2.7-commit-b1c2e7f was discovered to contain a remote code execution RCE vulnerability via the component /controllers/api/user.php...

CVE-2023-26817

CVE-2023-26817 concerns CodeFever before 2023.2.7-commit-b1c2e7f, with a remote code execution flaw in the component /controllers/api/user.php. Multiple connected sources corroborate the RCE in this version range and cite a high impact (CVSS 3.1: 8.8, HIGH) with NETWORK attack vector and LOW priv...

CVE-2023-26817

codefever before 2023.2.7-commit-b1c2e7f was discovered to contain a remote code execution RCE vulnerability via the component /controllers/api/user.php...

HPESBNW04465 rev.3 - HPE Aruba Bypassing Wi-Fi Encryption by Manipulating Transmit Queues, Multiple Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Virtual and Hardware-based Mobility Conductors - see vulnerability summary for details Affected Products ArubaOS Wi-Fi Controllers and Campus/...

logic controllers for building

The vulnerability of microprogramming software for logic controllers used in building and facility control systems, such as Schneider Electric’s spaceLYnk, Wiser for KNX formerly homeLYnk, and FellerLYnk, is related to the exploitation of inter-site requests. Exploiting this vulnerability allows ...

HPESBGN04448 rev.1 - HPE Intel 700 and E810 Series Ethernet Controllers, INTEL-SA-00754, Intel Ethernet Controllers and Adapters Advisory, Local Denial of Service

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Ethernet 1Gb 2-port 368FLR-MMT Adapter -Prior to CVL 4.10/FVL 9.10 - Intel Ethernet 700 Series Controller HPE Ethernet 1Gb 2-port 368i Adapter -Prior to CVL 4.10/FVL 9.10 -...

Schneider Electric spaceLYnk/homeLYnk Logic Compromise

The vulnerability of the microprogramming software for Schneider Electric’s spaceLYnk and homeLYn logic controllers is related to the lack of protection for operational data. Exploiting this vulnerability allows a remote attacker to compromise the device during the initial setup process...

Wago PFC100/PFC200 OS Command Injection (CVE-2020-12522)

The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 750-81xx/xxx-xxx, Series PFC 200 750-82xx/xxx-xxx, Series Wago Touch Panel 600 Standard Line 762-4xxx, Series Wago Touch Panel 600 Advanced Line...

ABB Freelance controllers security vulnerabilities

ABB Freelance controllers is an industrial automation control system from ABB designed to monitor and control industrial processes. A security vulnerability exists in ABB Freelance controllers. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the...

ABB Freelance controllers security vulnerabilities

ABB Freelance controllers is an industrial automation control system from ABB designed to monitor and control industrial processes. A security vulnerability exists in ABB Freelance controllers. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the...

Web Interface XSS

The vulnerability in the server-side components of the web interface for controlling programmable logic controllers like WAGO PFC100/PFC200, CC100, Edge Controller, as well as the sensor panels such as WAGO Touch Panel 600, exists due to the lack of protective measures for the web page structure...

Triconex Model 3009/3009X MP Processor DoS

The vulnerability of the microprogramming software of the Triconex Model 3009/3009X MP processors and the Tricon Communications Module is related to insufficient testing of exceptional states. Exploiting this vulnerability can allow attackers to trigger service failures using specially crafted...

Merten KNX PLC Authentication Bypass

The vulnerability of Merten KNX programmable logic controllers is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the device...

CVE-2023-21015

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2023-21015

In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...