ASPECT Enterprise Path Traversal

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to incorrect restrictions on path names to the catalog. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

ASPECT Enterprise Network Control Buffer Overflow

The vulnerability of microprogrammed software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series buildings is related to improper validation of certain types of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain...

ASPECT Enterprise Network Control Unauthenticated Access

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to errors in system configuration or setup. Exploiting this vulnerability can allow an attacker to gain unauthorized access to application...

ASPECT Enterprise Embedded Network Control File Name Disclosure

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to incorrect management of file names for PHP functions like include or require. Exploiting this vulnerability can allow an attacker to gain acce...

ASPECT Enterprise Network Control Buffer Overflow DoS

The vulnerability of microprogramming software in embedded network control devices of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to the use of files and directories accessible to external parties. Exploiting this vulnerability can allow an attacker operating remotely to gain...

ASPECT Enterprise Network Control Reversible Hash

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to the use of a reversible one-way hash function. Exploiting this vulnerability could allow an attacker to compromise data integrity remotely...

ASPECT Enterprise Network Control Privilege Escalation

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series buildings is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to increase...

ASPECT Enterprise Embedded Network Control Unlimited Resource DoS

The vulnerability of microprogrammed software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series buildings is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

ASPECT Enterprise Default Password Privilege Escalation

The vulnerability of microprogramming software in embedded network control devices of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to the use of default passwords. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

ASPECT Enterprise Weak Password Requirements

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to weak password requirements. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to administrators or...

ASPECT Enterprise Embedded Network Control Code Execution

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to improper code generation. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

ASPECT Enterprise Session Management

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to improper session management. Exploiting this vulnerability can allow an attacker to intercept a user’s session and increase their privileges...

Cisco Adaptive Security Appliances SNMP DoS

The vulnerability of the implementation of the Simple Network Management Protocol SNMP for microprogrammable network interface controllers in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to incorrect processing of additional values. Exploiting this...

ASPECT Enterprise Embedded Network Control Unlimited Resource Reboot

The vulnerability of microprogrammed software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to trigger a system reboot remotely...

PT-2024-9203 · Abb · Abb Aspect +2

Name of the Vulnerable Software and Affected Versions: ABB ASPECT - Enterprise version 3.08.02 NEXUS Series version 3.08.02 MATRIX Series version 3.08.02 Description: The issue is related to Denial of Service vulnerabilities, which could potentially disrupt device services. It is associated with...

CIP/Modbus PLC DoS

The vulnerability of CIP/Modbus programmable logic controllers of the Micro850/870 series lies in the uncontrollable consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack Overflow Code Execution Vulnerability

Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments developed by Fuji Electric Japan for collecting real-time data from PLCs, temperature controllers, inverters and other devices. Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack Overflow...

CVE-2024-12001: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in code-projects Wazifa System 1.0. Affected is an unknown function of the file /controllers/updatesettings.php of the component Setting Handler. The manipulation of the argument firstname leads to cross site scripting. It is possible to...

CVE-2024-12000: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Blood Bank System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /controllers/updatesettings.php of the component Setting Handler. The manipulation of the argument firstname leads to cross site scripting. Th...

Phoenix Contact Classic Line Industrial Controllers Missing Authentication For Critical Function (CVE-2019-9201)

Multiple Phoenix Contact devices allow remote attackers to establish TCP sessions to port 1962 and obtain sensitive information or make changes, as demonstrated by using the Create Backup feature to traverse all directories. This plugin only works with Tenable.ot. Please visit...