Lucene search
+L

815 matches found

CNVD
CNVD
•added 2021/04/16 12:00 a.m.•62 views

EIPStackGroup OpENer EtherNet/IP Out-of-Bounds Reading Vulnerability

Eipstackgroup Opener is a software for providing EtherNet/IP stacking capabilities for IO adapter devices organized by Eipstackgroup . EIPStackGroup OpENer Ethernet/IP has an out-of-bounds read vulnerability that can be exploited to send specially crafted packets to read arbitrary data...

7.5CVSS3.4AI score0.01354EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/04/16 12:00 a.m.•78 views

EIPStackGroup OpENer EtherNet/IP Denial of Service Vulnerability (CNVD-2021-53917)

Eipstackgroup Opener is a software used by the Eipstackgroup organization to provide EtherNet/IP stacking capabilities for IO adapter devices .A security vulnerability exists in EIPStackGroup OpENer Ethernet/IP that can be exploited by attackers to send specially crafted packets that could result...

7.5CVSS3.8AI score0.01346EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/04/15 12:00 a.m.•19 views

EIPStackGroup OpENer 安全漏洞

Eipstackgroup Opener is a software used by the Eipstackgroup organization to provide EtherNet/IP stacking capabilities for IO adapter devices .A security vulnerability exists in EIPStackGroup OpENer Ethernet/IP that can be exploited by attackers to send specially crafted packets that could result...

7.5CVSS5.5AI score0.01346EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/04/15 12:00 a.m.•15 views

EIPStackGroup OpENer 安全漏洞

Eipstackgroup Opener is a software used by the Eipstackgroup organization to provide EtherNet/IP stack functionality to IO adapter devices. EIPStackGroup OpENer Ethernet/IP has a security vulnerability that can be exploited by attackers to send specially crafted packets that could result in a...

7.5CVSS5.5AI score0.01346EPSS
SaveExploits0References5
ICS
ICS
•added 2021/04/15 12:00 a.m.•111 views

EIPStackGroup OpENer Ethernet/IP

1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION : Exploitable remotely/low attack complexity Vendor : EIPStackGroup Equipment : OpENer EtherNet/IP Vulnerabilities : Incorrect Conversion Between Numeric Types, Out-of-bounds Read, Reachable Assertion 2. RISK EVALUATION Successful exploitation of these...

8.2CVSS8.3AI score0.01354EPSS
SaveExploits1References5
NVD
NVD
•added 2021/02/16 5:15 p.m.•32 views

CVE-2021-20987

A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery...

8.6CVSS0.01138EPSS
SaveExploits0References2
Prion
Prion
•added 2021/02/16 5:15 p.m.•24 views

Memory corruption

A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery...

7.8CVSS8.8AI score0.01138EPSS
SaveExploits0References2Affected Software8
Cvelist
Cvelist
•added 2021/02/16 4:37 p.m.•41 views

CVE-2021-20987 Hilscher: EtherNet/IP stack crash for specific CIP service

A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery...

8.6CVSS9AI score0.01138EPSS
SaveExploits0References2
CVE
CVE
•added 2021/02/16 4:37 p.m.•101 views

CVE-2021-20987

Affects Hilscher EtherNet/IP Core V2 prior to 2.13.0.21. The vulnerability allows denial of service and memory corruption, which may lead to code injection via the network or cause device crashes. Exploitation context is network-based with no authentication. The provided documents do not specify ...

8.6CVSS8.9AI score0.01138EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/16 12:00 a.m.•5 views

CVE-2021-20987: Out-of-bounds Write

A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery...

8.6CVSS6AI score0.01138EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/02/16 12:00 a.m.•2 views

PT-2021-14316

Name of the Vulnerable Software and Affected Versions: Hilscher EtherNet/IP Core V2 versions prior to V2.13.0.21 Description: A denial of service and memory corruption issue was found that may lead to code injection through the network or cause devices to crash without recovery. Recommendations:...

8.6CVSS0.01138EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/02/16 12:00 a.m.•22 views

Hilscher EtherNet/IP Core Buffer Error Vulnerability

Hilscher EtherNet/IP Core is an Ethernet router from Hilscher, Germany. A buffer error vulnerability exists in V2 versions prior to Hilscher EtherNet/IP Core V2.13.0.21, which stems from a denial-of-service and memory corruption vulnerability, leading to unrecoverable code injection over the...

8.6CVSS7.5AI score0.01138EPSS
SaveExploits0References3
ICS
ICS
•added 2021/02/16 12:00 a.m.•65 views

Rockwell Automation Allen-Bradley Micrologix 1100

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: Allen-Bradley MicroLogix 1100 Vulnerability: Improper Handling of Length Parameter Inconsistency 2. RISK EVALUATION Successful exploitation of this vulnerability...

7.5CVSS7.8AI score0.05555EPSS
SaveExploits0References4
Talos Blog
Talos Blog
•added 2021/02/03 6:13 a.m.•26 views

Vulnerability Spotlight: Allen-Bradley Flex I/O vulnerable to denial of service

Jared Rittle of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. The Rockwell Automation Allen-Bradley Flex I/O input/output device is vulnerable to a denial-of-service vulnerability. FLEX I/O provides a wide range of input/output operations while keeping a smaller form factor. Use...

1.5AI score
SaveExploits0
ICS
ICS
•added 2021/02/02 12:00 a.m.•85 views

Rockwell Automation MicroLogix 1400 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: Rockwell Automation Equipment: MicroLogix 1400 Vulnerability: Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-21-033-01 Rockwell Automation MicroLogix 1400 that...

8.6CVSS9AI score0.01733EPSS
SaveExploits0References5
NVD
NVD
•added 2021/01/07 6:15 p.m.•52 views

CVE-2020-13573

A denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic 2.57.00.14 CPR 9 SR 3. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability...

7.5CVSS7.3AI score0.03458EPSS
SaveExploits1References1
Prion
Prion
•added 2021/01/07 6:15 p.m.•30 views

Denial of service

A denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic 2.57.00.14 CPR 9 SR 3. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability...

5CVSS7.3AI score0.03458EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2021/01/07 5:26 p.m.•129 views

CVE-2020-13573

Rockwell Automation RSLinx Classic 2.57.00.14 CPR 9 SR 3 is affected by a denial‑of‑service in the Ethernet/IP server. A specially crafted network request can trigger a DoS by sending a sequence of malicious packets to the Ethernet/IP server, impacting availability. Public advisories (e.g., TALOS...

7.5CVSS7.3AI score0.03458EPSS
SaveExploits1References1Affected Software1
Talos Blog
Talos Blog
•added 2021/01/07 7:31 a.m.•43 views

Vulnerability Spotlight: Denial-of-service vulnerability in Rockwell Automation RSLinx

Alexander Perez-Palma of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw.Cisco Talos recently discovered a denial-of-service vulnerability in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic. An attacker could exploit this vulnerability by sending the targ...

1.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/01/07 12:00 a.m.•3 views

PT-2021-9645

Name of the Vulnerable Software and Affected Versions Rockwell Automation RSLinx Classic version 2.57.00.14 CPR 9 SR 3 Description A denial-of-service issue exists in the Ethernet/IP server functionality. This can be triggered by a specially crafted network request, allowing an attacker to send...

7.5CVSS5.7AI score0.03458EPSS
SaveExploits1References6
Rows per page
Query Builder