Siemens Simatic Improper Input Validation

A vulnerability has been identified in SIMATIC CP 343-1 Advanced All versions, SIMATIC CP 343-1 Standard All versions, SIMATIC CP 443-1 Advanced All versions, SIMATIC CP 443-1 Standard All versions, SIMATIC S7-1500 Software Controller incl. F All versions V1.7.0, SIMATIC S7-1500 incl. F All...

Race condition

A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7, SIMATIC S7-400 CPU 414F-3 PN/DP V7, SIMATIC S7-400 CPU 416-3 PN/DP V7, SIMATIC S7-400 CPU 416F-3 PN/DP V7, Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFIN...

Siemens SINAMICS DCP 4Q DC/DC transformer 6RP0000-0AA25-0AA0

Binary data 764670.prm...

Siemens SINAMICS DCP 4Q DC/DC transformer 6RP0010-1AA32-0AA0

Binary data 764674.prm...

Siemens Multiple Devices Profinet DCP Denial of Service

Binary data 720110.prm...

Siemens Multiple Products Improper Input Validation

Binary data 720144.prm...

The vulnerability of Siemens’ PROFINET DCP software, related to insufficient validation of input data, allows a intruder to trigger a service failure.

The vulnerability of Siemens’ PROFINET DCP software is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause service failures in the local Ethernet segment using specially crafted PROFINET DCP broadcast packets...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 All versions V7.0.3, SIMATIC S7-400 CPU 414F-3 PN/DP V7 All versions V7.0.3, SIMATIC S7-400 CPU 416-3 PN/DP V7 All versions V7.0.3, SIMATIC S7-400 CPU 416F-3 PN/DP V7 All versions V7.0.3, SIMATIC CP 343-1 incl. SIPLUS varian...

CVE-2018-4843

CVE-2018-4843 affects Siemens SIMATIC/PROFINET devices (CP 343-1/CP 443-1, ET 200S/ET 200pro, S7-1500/300/400 families, WinAC RTX, SINUMERIK, Softnet PROFINET IO, etc.). The flaw is improper input validation in handling PROFINET DCP requests, allowing a specially crafted DCP packet to trigger a d...

lara033.dcp-fs.hetzner.de XSS vulnerability

Open Bug Bounty ID: OBB-461587 Description| Value ---|--- Affected Website:| lara033.dcp-fs.hetzner.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...

CVE-2017-12235

A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol PN-DCP for Cisco IOS 12.2 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability is due to the...

EUVD-2017-3808

A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol PN-DCP for Cisco IOS 12.2 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability is due to the...

CVE-2017-12235

The CVE-2017-12235 issue is a DoS flaw in Cisco IOS Software’s PROFINET Discovery and Configuration Protocol (PN-DCP) handling. It affects Cisco IOS on devices configured to process PN-DCP (notably Cisco Industrial Ethernet Switches) and stems from improper parsing of PN-DCP Identify Request pack...

Brother DCP-J132W Denial of Service Vulnerability

Brother DCP-J132W is a printer introduced by Brother. A denial of service vulnerability exists in httpd embedded in the Brother DCP-J132W, which allows a remote attacker to cause the printer to hang disrupting its network connection by sending a large number of HTTP packets...

Akamai Prioritizes People Safety and Continuity of Service during Hurricane Irma

Written by Mani Sundaram, SVP Global Services & Support; Francis Trentley, VP Security Services & Support; Roger Barrango, Director Global Security Operations. Hurricane Irma affected millions this week. As always here at Akamai, taking care of people comes first, and the wellbeing of our team wa...

Siemens SIMATIC S7 PLC Multiple Vulnerabilities (SSA-293562)

Siemens SIMATIC S7 devices are prone to multiple vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Denial of service

Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W and probably other DCP models allows remote attackers to hang the printer disrupting its network connection by sending a large amount of HTTP packets...

CVE-2017-12568

Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W and probably other DCP models allows remote attackers to hang the printer disrupting its network connection by sending a large amount of HTTP packets...

CVE-2017-12568

CVE-2017-12568 affects Debut embedded httpd 1.20 on Brother DCP-J132W (and likely other DCP models). The vulnerability enables a remote attacker to cause a Denial of Service by sending a large volume of HTTP packets, ultimately hanging the printer and disrupting its network connection. Descriptio...

CVE-2017-12568

Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W and probably other DCP models allows remote attackers to hang the printer disrupting its network connection by sending a large amount of HTTP packets...