Siemens Power Meter Sicam Q100 输入验证错误漏洞

The POWER METER SICAM Q100 is a multifunctional device used to detect, report and analyze measured values and events. Siemens POWER METER SICAM Q100 is vulnerable to an input validation error, which could be exploited by an attacker to crash the device followed by an automatic reboot or execute...

Siemens Power Meter Sicam Q100 输入验证错误漏洞

The POWER METER SICAM Q100 is a multifunctional device used to detect, report and analyze measured values and events. Siemens POWER METER SICAM Q100 is vulnerable to an input validation error, which could be exploited by an attacker to crash the device followed by an automatic reboot or execute...

CVE-2022-43546

CVE-2022-43546 affects Siemens POWER METER SICAM Q100 family and SICAM P850/P855 devices. The issue is due to improper validation of the EndTime parameter in web interface requests over port 443/tcp, which could allow an authenticated remote attacker to crash the device (followed by reboot) or ex...

PT-2022-21202 · Host Engineering · H0-Ecom100 Communications Module Firmware

Name of the Vulnerable Software and Affected Versions: Host Engineering H0-ECOM100 Communications Module Firmware versions v5.0.155 and prior Description: The issue allows an attacker to cause a stack-based buffer overflow by writing into name or description fields with data larger than the...

Bentley Systems MicroStation 缓冲区错误漏洞

Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. Bentley Systems MicroStation Connect has buffer error vulnerabilities. An attacker exploiting these vulnerabilities could cause the device being accessed to crash or allow remote...

CVE-2022-2970 MZ Automation libIEC61850 Stack-Based Buffer Overflow

MZ Automation's libIEC61850 versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e does not sanitize input before memcpy is used, which could allow an attacker to crash the device or remotely execute arbitrary code...

Seagate STDT4000100 安全漏洞

The Seagate STDT4000100 is a mechanical hard drive from Seagate USA. A security vulnerability exists in the Seagate STDT4000100 hard drive that originates from a physical attacker being able to exploit the audio signal of the Rhythm Nation music video to perform a resonant frequency attack, which...

多款Siemens SCALANCE产品安全漏洞

Siemens SCALANCE X Switches, an industrial Ethernet switch product from Siemens, Germany, is vulnerable to a buffer overflow vulnerability that could be exploited by an unauthenticated attacker to crash the affected device...

HUAWEI HarmonyOS Denial of Service Vulnerability

HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. A denial of service vulnerability exists in the frame scheduling module of Huawei HarmonyOS version 2.0, which stems from a null pointer...

HUAWEI HarmonyOS 代码问题漏洞

HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. A denial of service vulnerability exists in the frame scheduling module of Huawei HarmonyOS version 2.0, which stems from a null pointer...

Multiple Dahua Products Denial of Service Vulnerabilities

Dahua IPC-HFW2XXX is a series of IP cameras, Dahua IPC-HDBW2XXX is a series of cameras, Dahua ASI7XXXX is a series of face recognition access controllers, and Dahua IPC-HFW2XXX is a series of IP cameras. A denial of service vulnerability exists in several Dahua products, which could be exploited ...

CVE-2022-30560

When an attacker obtaining the administrative account and password, or through a man-in-the-middle attack, the attacker could send a specified crafted packet to the vulnerable interface then lead the device to crash...

CVE-2022-30560

When an attacker obtaining the administrative account and password, or through a man-in-the-middle attack, the attacker could send a specified crafted packet to the vulnerable interface then lead the device to crash...

CVE-2022-30560

When an attacker obtaining the administrative account and password, or through a man-in-the-middle attack, the attacker could send a specified crafted packet to the vulnerable interface then lead the device to crash...

CVE-2022-30560

When an attacker obtaining the administrative account and password, or through a man-in-the-middle attack, the attacker could send a specified crafted packet to the vulnerable interface then lead the device to crash...

H3C Magic R100 缓冲区错误漏洞

H3C Magic R100 is a router from H3C. H3C Magic R100 is vulnerable to a buffer overflow vulnerability, which can be exploited by remote attackers to submit special requests that can crash an application or execute arbitrary code in the application context...

CVE-2020-16209

CVE-2020-16209 describes a stack-based buffer overflow in Fieldcomm Group’s HART-IP interface (release 1.0.0.0) that can be triggered by specially crafted HART-IP messages with large payloads. Affected products include the HART-IP Developer Kit (v1.0.0.0) and hipserver (v3.6.1 listed in the advis...

CVE-2022-27481

A vulnerability has been identified in SCALANCE W1788-1 M12 All versions V3.0.0, SCALANCE W1788-2 EEC M12 All versions V3.0.0, SCALANCE W1788-2 M12 All versions V3.0.0, SCALANCE W1788-2IA M12 All versions V3.0.0. Affected devices do not properly handle resources of ARP requests. This could allow ...

CVE-2022-27481

A vulnerability has been identified in SCALANCE W1788-1 M12 All versions V3.0.0, SCALANCE W1788-2 EEC M12 All versions V3.0.0, SCALANCE W1788-2 M12 All versions V3.0.0, SCALANCE W1788-2IA M12 All versions V3.0.0. Affected devices do not properly handle resources of ARP requests. This could allow ...

Race condition

A vulnerability has been identified in SCALANCE W1788-1 M12 All versions V3.0.0, SCALANCE W1788-2 EEC M12 All versions V3.0.0, SCALANCE W1788-2 M12 All versions V3.0.0, SCALANCE W1788-2IA M12 All versions V3.0.0. Affected devices do not properly handle resources of ARP requests. This could allow ...