PT-2022-14120

Name of the Vulnerable Software and Affected Versions Rockwell Automation Logix Controllers affected versions not specified Description A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition, resulting in a major nonrecoverable faul...

CVE-2022-1797: Uncontrolled Resource Consumption

A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownloa...

Cisco IOS XE SNMP DoS

The vulnerability of the Simple Network Management Protocol SNMP implementation in Cisco IOS XE Catalyst access points and Cisco Catalyst 9800 and 9800-CL for Cloud wireless network controllers is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to...

Cisco ASA DNS DoS

The vulnerability of the DNS query handler in microprogramming-based network interface controllers of Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to...

TrueStack Direct Connect security vulnerability

TrueStack Direct Connect is a VPN management server from TrueStack USA, Inc. for easily connecting Windows and Mac computers to Windows domain controllers and file servers in the AWS cloud. A security vulnerability exists in TrueStack Direct Connect 1.4.7 that stems from incorrect application...

Exposure of Resource to Wrong Sphere in Spring Data REST

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

GHSA-4926-QPXG-6R3W Exposure of Resource to Wrong Sphere in Spring Data REST

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

OpenStack Neutron Denial of Service vulnerability

An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent controllers, an authenticated user may cause the API worker to consume increasing amounts of memory, resulting in API...

org.grails:grails-dependencies (2.2.0.rc1), org.grails:grails-hibernate (2.2.0.rc1) +16 more potentially affected by CVE-2019-12728 via org.grails:grails-core (2.2.0.rc1)

org.grails:grails-core MAVEN version 2.2.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.2.0.rc1 - org.grails:grails-hibernate 2.2.0.rc1 - org.grails:grails-logging...

org.grails:grails-logging (2.3.0.m2), org.grails:grails-plugin-async (2.3.0.m2) +19 more potentially affected by CVE-2019-12728 via org.grails:grails-core (2.3.0.m2)

org.grails:grails-core MAVEN version 2.3.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-logging 2.3.0.m2 - org.grails:grails-plugin-async 2.3.0.m2 - org.grails:grails-plugin-codecs...

org.grails:grails-dependencies (2.2.4), org.grails:grails-hibernate (2.2.4) +16 more potentially affected by CVE-2019-12728 via org.grails:grails-core (2.2.4)

org.grails:grails-core MAVEN version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.grails:grails-core and may be impacted: - org.grails:grails-dependencies 2.2.4 - org.grails:grails-hibernate 2.2.4 - org.grails:grails-logging 2.2.4 -...

Rockwell Automation Logix Controllers Resource Management Vulnerability

Rockwell Automation Logix Controllers is a high-performance control platform from Rockwell Automation. Use this single platform to perform sequence, process, drive, or motion control in any combination. A resource management error vulnerability exists in Rockwell Automation Logix Controllers, whi...

Rockwell Automation Logix Controllers

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Exploitable remotely Vendor: Rockwell Automation Equipment: Logix Controllers Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an unauthorized user to send malicious messages to...

PT-2022-2834

Name of the Vulnerable Software and Affected Versions HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 versions prior to 1.29 Description The issue allows an unauthenticated attacker to send a specially crafted network packet to delete a user from the web interface...

PT-2022-3239

Name of the Vulnerable Software and Affected Versions HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 versions prior to 1.29 Description An unauthenticated attacker can send specially crafted packets to update the notes section of the home page of the web interface...

PT-2022-2832

Name of the Vulnerable Software and Affected Versions HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 versions prior to 1.303 for the LP series and 1.297 for the EP series Description The issue exists due to the lack of measures to neutralize special elements used i...

PT-2022-2833

Name of the Vulnerable Software and Affected Versions HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 versions prior to 1.29 Description The issue is related to a buffer overflow caused by an unauthenticated HTTP request. This can lead to a segmentation fault and a...

PT-2022-2803

Name of the Vulnerable Software and Affected Versions HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 versions prior to 1.271 Description The issue is related to incorrect restriction of directory path names, allowing an authenticated attacker to upload files with...

PT-2022-3241

Name of the Vulnerable Software and Affected Versions HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 versions prior to 1.302 for the LP series and 1.296 for the EP series Description An unauthenticated attacker could arbitrarily upload firmware files to the target...

PT-2022-2805

Name of the Vulnerable Software and Affected Versions HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 versions prior to 1.302 for the LP series and 1.296 for the EP series Description The issue is related to a buffer overflow vulnerability due to the lack of input...