23 matches found
The vulnerability in the built-in software of the PLC Fastwel lies in the loading of code without checking its integrity, allowing an intruder to execute arbitrary code.
The vulnerability of the built-in software of the PLC Fastwel relates to the loading of code without checking its integrity. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the built-in software of the PLC Fastwel lies in the improper assignment of permissions to critical resources. This allows a malicious user to execute arbitrary commands and elevate their privileges to that of a superuser.
The vulnerability of the built-in software of the PLC Fastwel is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands and elevate their privileges to the level of superuser...
The vulnerability of the built-in software of the PLC Fastwel involves redirecting URLs to an unreliable website, allowing a hacker to redirect users to any given URL address.
The vulnerability in the built-in software of the PLC Fastwel relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary URL addresses remotely...
The vulnerability of the built-in software of the PLC Fastwel arises from the use of dangerous methods or functions, allowing a hacker to execute arbitrary commands and elevate their privileges to superuser level.
The vulnerability of the built-in software of the PLC Fastwel is related to the use of dangerous methods or functions. Exploiting this vulnerability allows a remote attacker to execute arbitrary operating system commands and elevate their privileges to that of a superuser by sending a POST reques...
The vulnerability of the embedded software of the PLK Fastwel arises from the improper assignment of permissions for critical resources, allowing a perpetrator to gain unauthorized access to protected information.
The vulnerability of the built-in software of the PLC Fastwel is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of the built-in software of the PLC Fastwel relates to the incorrect duration of a session, allowing an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the built-in software of the PLC Fastwel is related to an incorrect session duration. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
PT-2025-89: NULL Pointer Dereference in Fastwel PLC web server
The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. Exploitation of the vulnerability allows a remote attacker to cause a denial of service by sending multiple specially crafted HTTP requests. Vulnerability status: Confirmed by vend...
PT-2025-87: Incorrect session expiration in Fastwel PLC web server
The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. The discovered vulnerability can be exploited by an attacker to gain unlimited access to a device by brute-forcing or compromising a session token. Vulnerability status: Confirmed ...
PT-2025-86: Disclosure of confidential data via controller configuration request in Fastwel PLC web server
The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. The discovered vulnerability can be exploited by an attacker to obtain administrator‑level privileges. Vulnerability status: Confirmed by vendor Date of vulnerability remediation:...
PT-2025-85: Insufficient access control in Fastwel PLC web server
The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. Exploitation of the vulnerability allows an attacker with an unprivileged account to gain the access to protected information. Vulnerability status: Confirmed by vendor Date of...
PT-2025-84: Insecure firmware update mechanism in Fastwel PLC web server
The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. Exploitation of the vulnerability allows a remote attacke with administrative permissions in the execution environment to upload a modified update archive and execute arbitrary cod...
PT-2025-83: Improper permission assignment to a critical resource in Fastwel PLC web server
The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. Exploitation of the vulnerability allows an attacker with administrative permissions in a restricted environment to execute arbitrary code in the operating system and escalate thei...
PT-2025-82: Insecure OS сommand execution mechanism in Fastwel PLC web server
The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. The discovered vulnerability allows a remote attacker to execute arbitrary operating system commands and escalate their privileges to superuser level by sending a POST request via ...
PT-2025-81: OS command injection in Fastwel PLC web server
The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. The discovered vulnerability is related to a failure to neutralize special elements used in operating system commands. Exploitation of this vulnerability allows a remote attacker t...
PT-2025-40263
Уязвимость встроенного программного обеспечения ПЛК Fastwel связанная с неверным сроком действия сеанса. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...
PT-2025-40261
Уязвимость встроенного программного обеспечения ПЛК Fastwel связана с неправильным присвоением разрешений для критичного ресурса. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации...
PT-2025-40262
Уязвимость встроенного программного обеспечения ПЛК Fastwel связана с раскрытием информации при передаче данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...
PT-2025-40264
Уязвимость встроенного программного обеспечения ПЛК Fastwel связана с переадресацией URL на ненадежный сайт. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, перенаправить пользователя на произвольный URL-адрес...
PT-2025-40260
Уязвимость встроенного программного обеспечения ПЛК Fastwel связана с загрузкой кода без проверки его целостности.Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, позволяющая нарушителю выполнить произвольный код...
PT-2025-40259
Уязвимость встроенного программного обеспечения ПЛК Fastwel связана с неправильным присвоением разрешений для критичного ресурса. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольные команды и повысить свои привилегии до уровня суперпользователя...