1928 matches found
CVE-2020-9000
An issue was discovered in iPortalis iCS 7.1.13.0. Attackers can send a sequence of requests to rapidly cause .NET Input Validation errors. This increases the size of the log file on the remote server until memory is exhausted, therefore consuming the maximum amount of resources triggering a deni...
CVE-2020-9002
An issue was discovered in iPortalis iCS 7.1.13.0. An attacker can gain privileges by intercepting a request and changing UserRoleKey=COMPANYADMIN to UserRoleKey=DOMAINADMIN to achieve Domain Administrator access...
Design/Logic Flaw
An issue was discovered in iPortalis iCS 7.1.13.0. Attackers can send a sequence of requests to rapidly cause .NET Input Validation errors. This increases the size of the log file on the remote server until memory is exhausted, therefore consuming the maximum amount of resources triggering a deni...
Design/Logic Flaw
An issue was discovered in iPortalis iCS 7.1.13.0. An attacker can gain privileges by intercepting a request and changing UserRoleKey=COMPANYADMIN to UserRoleKey=DOMAINADMIN to achieve Domain Administrator access...
CVE-2020-9002
An issue was discovered in iPortalis iCS 7.1.13.0. An attacker can gain privileges by intercepting a request and changing UserRoleKey=COMPANYADMIN to UserRoleKey=DOMAINADMIN to achieve Domain Administrator access...
CVE-2020-9000
An issue was discovered in iPortalis iCS 7.1.13.0. Attackers can send a sequence of requests to rapidly cause .NET Input Validation errors. This increases the size of the log file on the remote server until memory is exhausted, therefore consuming the maximum amount of resources triggering a deni...
CVE-2020-9002
An issue was discovered in iPortalis iCS 7.1.13.0. An attacker can gain privileges by intercepting a request and changing UserRoleKey=COMPANYADMIN to UserRoleKey=DOMAINADMIN to achieve Domain Administrator access...
CVE-2020-9002
CVE-2020-9002 affects iPortalis iCS 7.1.13.0. An attacker can escalate privileges by intercepting a request and changing UserRoleKey=COMPANY_ADMIN to DOMAIN_ADMIN, granting Domain Administrator access. Details across sources consistently describe a privilege escalation via improper validation of ...
CVE-2020-9000
CVE-2020-9000 affects iPortalis iCS 7.1.13.0. The issue arises from .NET input validation that allows an attacker to send a sequence of requests to rapidly enlarge the remote server’s log file, causing memory exhaustion and a denial-of-service condition. The Real-world exposure is network-accessi...
CVE-2020-9002: Improper Input Validation
An issue was discovered in iPortalis iCS 7.1.13.0. An attacker can gain privileges by intercepting a request and changing UserRoleKey=COMPANYADMIN to UserRoleKey=DOMAINADMIN to achieve Domain Administrator access...
CVE-2020-9000: Uncontrolled Resource Consumption
An issue was discovered in iPortalis iCS 7.1.13.0. Attackers can send a sequence of requests to rapidly cause .NET Input Validation errors. This increases the size of the log file on the remote server until memory is exhausted, therefore consuming the maximum amount of resources triggering a deni...
PT-2021-12820
Name of the Vulnerable Software and Affected Versions: iPortalis iCS version 7.1.13.0 Description: An issue allows an attacker to gain privileges by intercepting a request and modifying the UserRoleKey from COMPANY ADMIN to DOMAIN ADMIN to achieve Domain Administrator access. Recommendations: For...
iPortalis: Input validation error vulnerability
iPortalis is providing management of Microsoft licenses, costs, governance and reporting capabilities. An input validation error vulnerability exists in iPortalis iCS that stems from not adding a valid privilege authentication to a UserRoleKey=request. An attacker could gain domain administrative...
iPortalis Resource Management Error Vulnerability
iPortalis is providing management of Microsoft licenses, costs, governance and reporting capabilities. A resource management error vulnerability exists in iPortalis iCS that stems from the product's failure to add valid validation for log file sizes. An attacker could cause a denial of service by...
PT-2021-12819
Name of the Vulnerable Software and Affected Versions: iPortalis iCS version 7.1.13.0 Description: An issue was discovered in iPortalis iCS where attackers can send a sequence of requests to rapidly cause .NET Input Validation errors. This increases the size of the log file on the remote server...
CISA Releases Security Advisory for InterNiche Products
CISA has released an Industrial Control Systems ICS advisory detailing multiple vulnerabilities in InterNiche products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the ICS Advisory ICSA-21-217-01...
CISA Releases Security Advisory for Geutebruck Devices
CISA has released an Industrial Control Systems ICS advisory detailing multiple vulnerabilities in multiple Geutebruck G-CAM E2 series devices and Encoder G-Code versions. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users an...
LCDS LAquis SCADA
1. EXECUTIVE SUMMARY CVSS v3 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: LCDS—Leão Consultoria e Desenvolvimento de Sistemas Ltda ME Equipment: LAquis SCADA Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an...
IoT Piranhas Are Swarming Industrial Controls
Full transparency: Curtis Simpson, CISO at Armis, the enterprise IoT security company, was fundamentally a black hat at the age of 12, before he even knew what a black hat was. One day he got flooded over IRC and was fascinated: What just happened? And how did it happen? He’s since spent the vast...
ICS Focused Malware
Updated July 20, 2021: The U.S. Government attributes this activity to Russian nation-state cyber actors and assess that Russian nation-state cyber actors deployed Havex malware against industrial control systems. For more information on Russian malicious cyber activity, refer...