560 matches found
CVE-2016-9357
An issue was discovered in certain legacy Eaton ePDUs -- the affected products are past end-of-life EoL and no longer supported: EAMxxx prior to June 30, 2015, EMAxxx prior to January 31, 2014, EAMAxx prior to January 31, 2014, EMAAxx prior to January 31, 2014, and ESWAxx prior to January 31, 201...
Eaton ePDU Path Traversal Vulnerability
OVERVIEW Independent researcher Maxim Rupp has identified a path traversal vulnerability in certain legacy Eaton ePDUs. Although the affected products are past end-of-life EoL and is no longer supported, Eaton has provided defense-in-depth mitigation instructions to protect devices that are still...
Eaton Lighting Systems EG2 Web Control Authentication Bypass Vulnerabilities
OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on March 1, 2016, and is being released to the NCCIC/ICS-CERT web site. Independent researcher Maxim Rupp has identified vulnerabilities in Eaton Lighting Systems’ EG2 Web Control application. Eaton Lighting Systems...
eaton-jobs.com XSS vulnerability
Vulnerable URL: http://www.eaton-jobs.com/ListJobs/All/Search/jobtitle/test%22%20onmouseover=alert'OPENBUGBOUNTY';%22/all/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 131774 VIP...
Eaton ELCSoft Heap Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Eaton ELCSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing of EPC...
CVE-2016-4512
Stack-based buffer overflow in ELCSimulator in Eaton ELCSoft 2.4.01 and earlier allows remote attackers to execute arbitrary code via a long packet...
CVE-2016-4512
Stack-based buffer overflow in ELCSimulator in Eaton ELCSoft 2.4.01 and earlier allows remote attackers to execute arbitrary code via a long packet...
CVE-2016-4509
Heap-based buffer overflow in elcsoft.exe in Eaton ELCSoft 2.4.01 and earlier allows remote authenticated users to execute arbitrary code via a crafted file...
CVE-2016-4509
Heap-based buffer overflow in elcsoft.exe in Eaton ELCSoft 2.4.01 and earlier allows remote authenticated users to execute arbitrary code via a crafted file...
Heap overflow
Heap-based buffer overflow in elcsoft.exe in Eaton ELCSoft 2.4.01 and earlier allows remote authenticated users to execute arbitrary code via a crafted file...
Stack overflow
Stack-based buffer overflow in ELCSimulator in Eaton ELCSoft 2.4.01 and earlier allows remote attackers to execute arbitrary code via a long packet...
CVE-2016-4509
CVE-2016-4509 affects Eaton ELCSoft programming software (ELCSoft) versions 2.4.01 and earlier. A heap-based buffer overflow in elcsoft.exe when processing EPC files can allow remote code execution. ZDI notes the flaw in EPC file handling can overwrite a TList object in memory; exploitation repor...
CVE-2016-4509
Heap-based buffer overflow in elcsoft.exe in Eaton ELCSoft 2.4.01 and earlier allows remote authenticated users to execute arbitrary code via a crafted file...
CVE-2016-4512
Stack-based buffer overflow in ELCSimulator in Eaton ELCSoft 2.4.01 and earlier allows remote attackers to execute arbitrary code via a long packet...
CVE-2016-4512
The CVE-2016-4512 issue affects Eaton ELCSoft ELCSimulator (infecting the ELCSimulator.exe) in ELCSoft versions 2.4.01 and earlier. The root cause is a stack-based buffer overflow when processing network TCP input, allowing remote attackers to execute arbitrary code with the process’s privileges ...
Eaton ELCSoft Programming Software Stack Buffer Overflow Vulnerability
Eaton ELCSoft Programming Software is a suite of software for configuring programmable logic controllers. A stack buffer overflow vulnerability exists in Eaton ELCSoft Programming Software, which can be exploited by a remote attacker to submit a special request to execute arbitrary code...
Eaton ELCSoft Programming Software Heap Buffer Overflow Vulnerability
Eaton ELCSoft Programming Software is a suite of software for configuring programmable logic controllers from Eaton Corporation, USA. A heap buffer overflow vulnerability exists in Eaton ELCSoft Programming Software version 2.4.01 and earlier. A remote attacker could exploit this vulnerability to...
CVE-2016-2272
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...
CVE-2016-2272
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...
CVE-2016-0871
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to read the configuration file, and consequently discover credentials, via a direct request...