1087 matches found
Emerson ControlWave Micro Process Automation Controller Buffer Overflow Vulnerability
ControlWave Micro is a highly programmable controller that combines the unique features of a Programmable Logic Controller PLC and a Remote Terminal Unit RTU in one hybrid controller. A buffer overflow vulnerability exists in the Emerson ControlWave Micro Process Automation Controller, which can ...
Emerson ControlWave Micro Process Automation Controller
CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Emerson Process Management LLLP Equipment: ControlWave Micro Process Automation Controller Vulnerability: Stack-based Buffer Overflow AFFECTED PRODUCTS The following versions of ControlWave Micro firmware, a family of...
CVE-2016-9347
An issue was discovered in Emerson SE4801T0X Redundant Wireless I/O Card V13.3, and SE4801T1X Simplex Wireless I/O Card V13.3. DeltaV Wireless I/O Cards WIOC running the firmware available in the DeltaV system, release v13.3, have the SSH Secure Shell functionality enabled unnecessarily...
CVE-2016-9345
An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Critical vulnerabilities may allow a local attacker to elevate privileges within the DeltaV control system...
CVE-2016-9347
An issue was discovered in Emerson SE4801T0X Redundant Wireless I/O Card V13.3, and SE4801T1X Simplex Wireless I/O Card V13.3. DeltaV Wireless I/O Cards WIOC running the firmware available in the DeltaV system, release v13.3, have the SSH Secure Shell functionality enabled unnecessarily...
CVE-2016-9345
An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Critical vulnerabilities may allow a local attacker to elevate privileges within the DeltaV control system...
Xxe
An XML External Entity XXE issue was discovered in Emerson Liebert SiteScan Web Version 6.5, and prior. An attacker may enter malicious input to Liebert SiteScan through a weakly configured XML parser causing the application to execute arbitrary code or disclose file contents from a server or...
CVE-2016-8348
An XML External Entity XXE issue was discovered in Emerson Liebert SiteScan Web Version 6.5, and prior. An attacker may enter malicious input to Liebert SiteScan through a weakly configured XML parser causing the application to execute arbitrary code or disclose file contents from a server or...
Code injection
An issue was discovered in Emerson SE4801T0X Redundant Wireless I/O Card V13.3, and SE4801T1X Simplex Wireless I/O Card V13.3. DeltaV Wireless I/O Cards WIOC running the firmware available in the DeltaV system, release v13.3, have the SSH Secure Shell functionality enabled unnecessarily...
Design/Logic Flaw
An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Critical vulnerabilities may allow a local attacker to elevate privileges within the DeltaV control system...
CVE-2016-8348
An XML External Entity XXE issue was discovered in Emerson Liebert SiteScan Web Version 6.5, and prior. An attacker may enter malicious input to Liebert SiteScan through a weakly configured XML parser causing the application to execute arbitrary code or disclose file contents from a server or...
CVE-2016-9345
An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Critical vulnerabilities may allow a local attacker to elevate privileges within the DeltaV control system...
CVE-2016-8348
An XML External Entity XXE issue was discovered in Emerson Liebert SiteScan Web Version 6.5, and prior. An attacker may enter malicious input to Liebert SiteScan through a weakly configured XML parser causing the application to execute arbitrary code or disclose file contents from a server or...
CVE-2016-9347
CVE-2016-9347 affects Emerson DeltaV Wireless I/O Cards (WIOC) SE4801T0X Redundant and SE4801T1X Simplex, firmware v13.3, where SSH is enabled unnecessarily. Exploitation could be remote via an open SSH port. Emerson published a fix in NK-1500-0152 (hotfix DeltaV_133_WIOC_02_CSS) that disables th...
CVE-2016-8348
CVE-2016-8348 describes an XML External Entity (XXE) vulnerability in Emerson Liebert SiteScan Web (Version 6.5 and earlier). The issue arises from a weakly configured XML parser, allowing an attacker to send malicious XML input that could cause arbitrary code execution or disclosure of server/ne...
CVE-2016-9347
An issue was discovered in Emerson SE4801T0X Redundant Wireless I/O Card V13.3, and SE4801T1X Simplex Wireless I/O Card V13.3. DeltaV Wireless I/O Cards WIOC running the firmware available in the DeltaV system, release v13.3, have the SSH Secure Shell functionality enabled unnecessarily...
CVE-2016-9345
DeltaV Easy Security Management in Emerson DeltaV V12.3, V12.3.1, and V13.3 is affected by CVE-2016-9345 due to improper privilege management, enabling a local attacker to elevate privileges within the DeltaV control system. Exploitation is local with no remote vector; user interaction may be req...
Emerson Liebert SiteScan Information Disclosure Vulnerability
Emerson Liebert SiteScan Web is a suite of Web-based data center monitoring applications. An information disclosure vulnerability exists in Emerson Liebert SiteScan Web, which can be exploited by a remote attacker to submit a special request to obtain sensitive information...
Multiple Emerson Product Security Bypass Vulnerabilities
The Emerson SE4801T0X Redundant Wireless I/O Card and the SE4801T1X Simplex Wireless I/O Card are Emerson Electric's suite of wireless I/O cards for connecting workstations and servers in DeltaV software for process control networks. workstations and servers in a DeltaV software for process contr...
Emerson DeltaV Privilege Vulnerability
Emerson DeltaV is a digital automation system from Emerson. The system offers I/O on-demand configuration, embedded intelligent control, and alarm panels. An elevation vulnerability exists in Emerson DeltaV. A local attacker could exploit this vulnerability to gain elevated privileges...