CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

325 matches found

CNVD•added 2016/11/14 12:00 a.m.•11 views

Land Attack Vulnerability in Schneider 140NOE77101 Ethernet Module

The 40NOE77101 is an Ethernet communication module for Schneider's Quantum series PLCs. A Land attack vulnerability exists in the TCP/IP stack of the Schneider 140NOE77101 Ethernet module. Since the program sends TCP SYN messages with the same source and destination IP both IP addresses of the...

6.8AI score

SaveExploits0

CNVD•added 2016/09/21 12:00 a.m.•8 views

Schneider 140NOE77101 Ethernet Module IP Protocol Denial of Service Vulnerability

The 140NOE77101 is an Ethernet communication module for Schneider's Quantum series PLCs. A denial of service vulnerability exists in the 140NOE77101 Ethernet module IP protocol, which occurs when the NOE module receives all segmented and reorganized messages with a total length exceeding 65535...

6.8AI score

SaveExploits0

NVD•added 2016/09/06 12:59 a.m.•24 views

CVE-2016-7114

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

9CVSS9.2AI score0.02113EPSS

SaveExploits0References5

OSV•added 2016/09/06 12:59 a.m.•9 views

CVE-2016-7114

8.8CVSS5.7AI score0.02113EPSS

SaveExploits0References5

NVD•added 2016/09/06 12:59 a.m.•21 views

CVE-2016-7113

7.8CVSS8.4AI score0.03002EPSS

SaveExploits0References5

Prion•added 2016/09/06 12:59 a.m.•22 views

Authentication flaw

10CVSS7AI score0.0286EPSS

SaveExploits0References5Affected Software1

Prion•added 2016/09/06 12:59 a.m.•19 views

Authentication flaw

9CVSS7AI score0.02113EPSS

SaveExploits0References5Affected Software1

OSV•added 2016/09/06 12:59 a.m.•3 views

CVE-2016-7112

9.8CVSS5.7AI score0.0286EPSS

SaveExploits0References5

Cvelist•added 2016/09/06 12:00 a.m.•34 views

CVE-2016-7113

7.2AI score0.03002EPSS

SaveExploits0References5

Rapid7 Vulnerability Database (full)•added 2016/09/06 12:00 a.m.•3 views

CVE-2016-7112: Improper Authentication

10CVSS7.8AI score0.0286EPSS

SaveExploits0References2

Cvelist•added 2016/09/06 12:00 a.m.•32 views

CVE-2016-7112

9.5AI score0.0286EPSS

SaveExploits0References5

Rapid7 Vulnerability Database (full)•added 2016/09/06 12:00 a.m.•4 views

CVE-2016-7114: Improper Authentication

9CVSS7.4AI score0.02113EPSS

SaveExploits0References2

CVE•added 2016/09/06 12:00 a.m.•75 views

CVE-2016-7113

Siemens SIPROTEC 4/Compact EN100 Ethernet module vulnerabilities include CVE-2016-7113 (IMPROPER INPUT VALIDATION) where specially crafted packets to Port 80/TCP may cause the EN100 module to enter defect mode. Affected firmware variants are PROFINET IO (< V1.04.01), Modbus TCP (< V1.10.01/...

7.8CVSS8.1AI score0.03002EPSS

SaveExploits0References5Affected Software1

CVE•added 2016/09/06 12:00 a.m.•76 views

CVE-2016-7114

Siemens SIPROTEC 4/Compact EN100 Ethernet module family is affected by CVE-2016-7114 (Improper Authentication). The vulnerability allows remote attackers with network access to the device web interface (port 80) to possibly circumvent authentication and perform administrative operations, requirin...

9CVSS9AI score0.02113EPSS

SaveExploits0References5Affected Software1

Rapid7 Vulnerability Database (full)•added 2016/09/06 12:00 a.m.•5 views

CVE-2016-7113: Undefined Security Weakness

7.8CVSS7AI score0.03002EPSS

SaveExploits0References2

CNVD•added 2016/08/09 12:00 a.m.•10 views

Mitsubishi LJ71E71-100-CM Communication Module Web Services Buffer Overflow Vulnerability

Mitsubishi L06 is a high-end PLC of Mitsubishi, its Ethernet communication module LJ71E71-100-CM is open to web service, support http protocol communication, you can access and set the configuration information of the device by logging into the web server. In the HTTP message sent to the...

7.1AI score

SaveExploits0

ICS•added 2016/06/10 6:00 a.m.•60 views

Siemens SIPROTEC 4 and SIPROTEC Compact Vulnerabilities

OVERVIEW Siemens reports that they have released a firmware update for SIPROTEC 4 and SIPROTEC Compact devices to mitigate authentication bypass and resource exhaustion vulnerabilities. Kirill Nesterov and Anatoly Katushin from Kaspersky Lab reported some of these vulnerabilities directly to...

10CVSS9.4AI score0.03002EPSS

SaveExploits0References10

OSV•added 2016/05/31 1:59 a.m.•8 views

CVE-2016-4785

5.3CVSS5.8AI score0.02676EPSS

SaveExploits0References6

OSV•added 2016/05/31 1:59 a.m.•4 views

CVE-2016-4784

A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

5.3CVSS5.7AI score0.02676EPSS

SaveExploits0References6

NVD•added 2016/05/31 1:59 a.m.•28 views

CVE-2016-4784

5.3CVSS6AI score0.02676EPSS

SaveExploits0References6

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by