587 matches found
CVE-2016-4512
The CVE-2016-4512 issue affects Eaton ELCSoft ELCSimulator (infecting the ELCSimulator.exe) in ELCSoft versions 2.4.01 and earlier. The root cause is a stack-based buffer overflow when processing network TCP input, allowing remote attackers to execute arbitrary code with the process’s privileges ...
CVE-2016-4512
Stack-based buffer overflow in ELCSimulator in Eaton ELCSoft 2.4.01 and earlier allows remote attackers to execute arbitrary code via a long packet...
Eaton ELCSoft Programming Software Stack Buffer Overflow Vulnerability
Eaton ELCSoft Programming Software is a suite of software for configuring programmable logic controllers. A stack buffer overflow vulnerability exists in Eaton ELCSoft Programming Software, which can be exploited by a remote attacker to submit a special request to execute arbitrary code...
Eaton ELCSoft Programming Software Heap Buffer Overflow Vulnerability
Eaton ELCSoft Programming Software is a suite of software for configuring programmable logic controllers from Eaton Corporation, USA. A heap buffer overflow vulnerability exists in Eaton ELCSoft Programming Software version 2.4.01 and earlier. A remote attacker could exploit this vulnerability to...
CVE-2016-2272
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...
CVE-2016-2272
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...
CVE-2016-0871
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to read the configuration file, and consequently discover credentials, via a direct request...
CVE-2016-0871
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to read the configuration file, and consequently discover credentials, via a direct request...
Design/Logic Flaw
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to read the configuration file, and consequently discover credentials, via a direct request...
Code injection
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...
CVE-2016-2272
CVE-2016-2272 affects Eaton Lighting EG2 Web Control versions 4.04P and earlier. The ICS advisory notes an authentication bypass/root cause: reliance on cookies without proper validation/integrity, enabling a remote attacker to alter browser cookies and perform administrative actions that could c...
CVE-2016-2272
Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified impact via a modified cookie...
CVE-2016-0871
The CVE-2016-0871 issue affects Eaton Lighting EG2 Web Control (V4.04P and prior). Root causes include CWE-565: Reliance on Cookies without Validation, and CWE-312: Cleartext Storage of Sensitive Information. A remote attacker could read configuration files and view credentials via a direct reque...
Eaton Lighting Systems EG2 Web Control Authentication Bypass Vulnerability
The Eaton Lighting Systems EG2 Web Control is a controller product from Eaton Lighting Systems USA for Internet and Wi-Fi LAN connections to the iLumin network. An authentication bypass vulnerability exists in Eaton Lighting Systems EG2 Web Control V4.04P and prior versions. A remote attacker cou...
Eaton Lighting Systems EG2 Web Control Authentication Bypass Vulnerability (CNVD-2016-02006)
The Eaton Lighting Systems EG2 Web Control is a controller product from Eaton Lighting Systems USA for Internet and Wi-Fi LAN connections to the iLumin network. An authentication bypass vulnerability exists in Eaton Lighting Systems EG2 Web Control version 4.04P and earlier. A remote attacker cou...
Eaton ELCSoft Programming Software Memory Vulnerabilities
OVERVIEW Ariele Calgaviano working with Zero Day Initiative has identified a heap-based memory corruption vulnerability and a stack buffer overflow vulnerability in Eaton’s ELCSoft programming software. Eaton has released a revision to mitigate these vulnerabilities. These vulnerabilities could b...
CVE-2015-6471
Eaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on Form 6 controls and Idea and IdeaPLUS relays does not properly initialize padding fields in Ethernet packets, which allows remote attackers to obtain sensitive information by reading packet data...
Information disclosure
Eaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on Form 6 controls and Idea and IdeaPLUS relays does not properly initialize padding fields in Ethernet packets, which allows remote attackers to obtain sensitive information by reading packet data...
CVE-2015-6471
CVE-2015-6471 affects Eaton Cooper Power Systems ProView 4.x and 5.x (before 5.1) on Form 6 controls and Idea/IdeaPLUS relays. The root cause is improper initialization of padding fields in Ethernet frames, allowing a remote attacker to read packet data and disclose information. Impact is informa...
