Lucene search
+L

560 matches found

NVD
NVD
added 2018/03/20 4:29 p.m.16 views

CVE-2018-7511

In Eaton ELCSoft versions 2.04.02 and prior, there are multiple cases where specially crafted files could cause a buffer overflow which, in turn, may allow remote execution of arbitrary code...

6.8CVSS5.8AI score0.02086EPSS
Exploits0References3
Prion
Prion
added 2018/03/20 4:29 p.m.23 views

Buffer overflow

In Eaton ELCSoft versions 2.04.02 and prior, there are multiple cases where specially crafted files could cause a buffer overflow which, in turn, may allow remote execution of arbitrary code...

6.8CVSS5.8AI score0.02086EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2018/03/20 4:0 p.m.20 views

CVE-2018-7511

In Eaton ELCSoft versions 2.04.02 and prior, there are multiple cases where specially crafted files could cause a buffer overflow which, in turn, may allow remote execution of arbitrary code...

5.8AI score0.02086EPSS
Exploits0References3
CVE
CVE
added 2018/03/20 4:0 p.m.51 views

CVE-2018-7511

In Eaton ELCSoft, versions 2.04.02 and prior, there are multiple cases where specially crafted files could cause a buffer overflow, which may allow remote execution of arbitrary code.ffected product: ELCSoft programming software for Eaton ELC controllers. Root cause: improper input handling leadi...

6.8CVSS5.8AI score0.02086EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2018/03/09 12:0 a.m.7 views

Eaton ELCSoft Arbitrary Code Execution Vulnerability

Eaton ELCSoft is programmable logic control software that runs on a PC and helps configure ELC controllers. An arbitrary code execution vulnerability exists in Eaton ELCSoft 2.04.02 and earlier versions, where there are multiple scenarios where a specially crafted file could result in a buffer...

6.8CVSS8.4AI score0.02086EPSS
Exploits0References1
ICS
ICS
added 2018/03/06 12:0 a.m.65 views

Eaton ELCSoft

CVSS v3 6.3 ATTENTION: Exploitable remotely/low skill level to exploit. Vendor: Eaton Equipment: ELCSoft Vulnerability: Improper Input Validation AFFECTED PRODUCTS ELCSoft is programming software for all Eaton ELC programmable logic controllers. The ELC programmable logic controllers are not...

6.8CVSS6.2AI score0.02086EPSS
Exploits0References5
Openbugbounty
Openbugbounty
added 2018/02/07 4:19 p.m.9 views

funds.eatonvance.com XSS vulnerability

Open Bug Bounty ID: OBB-554693 Description| Value ---|--- Affected Website:| funds.eatonvance.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.2AI score
Exploits0
CNVD
CNVD
added 2017/09/27 12:0 a.m.5 views

Eaton ELCSoft EPC File Parsing Out-of-Bounds Access Remote Code Execution Vulnerability

The Eaton ELCSoft programmable logic control software runs on a PC and can help configure the ELC controller. An out-of-bounds access remote code execution vulnerability exists in Eaton ELCSoft, which can be exploited by an attacker to execute arbitrary code in the context of the current process...

8.5AI score
Exploits0References1
CNVD
CNVD
added 2017/09/27 12:0 a.m.4 views

Eaton ELCSoft SegCmt Stack Buffer Overflow Vulnerability

The Eaton ELCSoft programmable logic control software runs on a PC and can help configure the ELC controller. A stack buffer overflow vulnerability exists in Eaton ELCSoft due to the program failing to properly validate user-supplied data before copying it into a fixed-length stack buffer. An...

8AI score
Exploits0References1
CNVD
CNVD
added 2017/09/27 12:0 a.m.5 views

Eaton ELCSoft Out-of-Bounds Access Remote Code Execution Vulnerability

The Eaton ELCSoft programmable logic control software runs on a PC and can help configure the ELC controller. An out-of-bounds access remote code execution vulnerability exists in Eaton ELCSoft, where memory access exceeds the end of the allocation buffer due to the program process failing to...

8.5AI score
Exploits0References1
CNVD
CNVD
added 2017/09/27 12:0 a.m.4 views

Eaton ELCSoft DEV File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability

The Eaton ELCSoft programmable logic control software runs on a PC and can help configure the ELC controller. An out-of-bounds write remote code execution vulnerability exists in Eaton ELCSoft, which can be exploited by an attacker to execute arbitrary code in the context of the current process...

8.7AI score
Exploits0References1
CNVD
CNVD
added 2017/09/27 12:0 a.m.5 views

Eaton ELCSoft LAD File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability

The Eaton ELCSoft programmable logic control software runs on a PC and can help configure the ELC controller. Eaton ELCSoft suffers from an out-of-bounds write remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current process...

8.7AI score
Exploits0References1
CNVD
CNVD
added 2017/09/27 12:0 a.m.3 views

Eaton ELCSoft SFC File Parsing Out-of-Bounds Access Remote Code Execution Vulnerability

The Eaton ELCSoft programmable logic control software runs on a PC and can help configure the ELC controller. A security vulnerability exists in Eaton ELCSoft that can be exploited by an attacker to execute arbitrary code in the context of the current process...

7.7AI score
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/09/26 12:0 a.m.25 views

(0Day) Eaton ELCSoft EPC File Parsing Out-Of-Bounds Access Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Eaton ELCSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of an...

7.5CVSS7.1AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2017/09/26 12:0 a.m.20 views

(0Day) Eaton ELCSoft EPC File Parsing Out-Of-Bounds Access Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Eaton ELCSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of an...

7.5CVSS6.9AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2017/09/26 12:0 a.m.13 views

(0Day) Eaton ELCSoft Device Comment Range Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Eaton ELCSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of a...

7.5CVSS7.1AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2017/09/26 12:0 a.m.248 views

(0Day) Eaton ELCSoft LAD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Eaton ELCSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of a L...

7.5CVSS6.9AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2017/09/26 12:0 a.m.12 views

(0Day) Eaton ELCSoft DEV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Eaton ELCSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of a D...

7.5CVSS6.9AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2017/09/26 12:0 a.m.17 views

(0Day) Eaton ELCSoft SFC File Parsing Out-Of-Bounds Access Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Eaton ELCSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of an...

7.5CVSS7AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2017/09/26 12:0 a.m.22 views

(0Day) Eaton ELCSoft SegCmt Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Eaton ELCSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of a...

7.5CVSS6.9AI score
Exploits0
Rows per page
Query Builder