Lucene search
+L

602 matches found

OSV
OSV
added 2022/05/20 1:15 p.m.7 views

CVE-2022-24287

A vulnerability has been identified in SIMATIC PCS 7 V8.2 All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3 UC06, SIMATIC PCS 7 V9.1 All versions V9.1 SP1 UC01, SIMATIC WinCC Runtime Professional V16 and earlier All versions, SIMATIC WinCC Runtime Professional V17 All versions V17 Upd4,...

7.8CVSS5.7AI score0.00229EPSS
SaveExploits0References1
NVD
NVD
added 2022/05/20 1:15 p.m.36 views

CVE-2022-24287

A vulnerability has been identified in SIMATIC PCS 7 V8.2 All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3 UC06, SIMATIC PCS 7 V9.1 All versions V9.1 SP1 UC01, SIMATIC WinCC Runtime Professional V16 and earlier All versions, SIMATIC WinCC Runtime Professional V17 All versions V17 Upd4,...

7.8CVSS0.00229EPSS
SaveExploits0References1
Prion
Prion
added 2022/05/20 1:15 p.m.25 views

Design/Logic Flaw

A vulnerability has been identified in SIMATIC PCS 7 V8.2 All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3 UC06, SIMATIC PCS 7 V9.1 All versions V9.1 SP1 UC01, SIMATIC WinCC Runtime Professional V16 and earlier All versions, SIMATIC WinCC Runtime Professional V17 All versions V17 Upd4,...

4.6CVSS7.3AI score0.00229EPSS
SaveExploits0References1Affected Software3
Rockylinux
Rockylinux
added 2022/05/17 6:35 a.m.23 views

new packages: gnome-kiosk

An update is available for gnome-kiosk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

2.2AI score
SaveExploits0
OSV
OSV
added 2022/05/16 6:15 a.m.7 views

CVE-2022-29586

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode...

7.4CVSS5.8AI score0.0043EPSS
SaveExploits0References2
NVD
NVD
added 2022/05/16 6:15 a.m.23 views

CVE-2022-29586

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode...

7.4CVSS0.0043EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/05/16 6:15 a.m.6 views

CVE-2022-29586

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode...

7.4CVSS5.9AI score0.0043EPSS
SaveExploits0References3
Prion
Prion
added 2022/05/16 6:15 a.m.16 views

Code injection

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode...

6.9CVSS7.4AI score0.0043EPSS
SaveExploits0References2Affected Software45
Cvelist
Cvelist
added 2022/05/16 5:35 a.m.26 views

CVE-2022-29586

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode...

7.6AI score0.0043EPSS
SaveExploits0References2
CVE
CVE
added 2022/05/16 5:35 a.m.94 views

CVE-2022-29586

The CVE-2022-29586 issue affects Konica Minolta bizhub MFP devices released before 2022-04-14. The root cause is a sandbox escape vulnerability that allows an attacker with physical access to trigger a kiosk-mode escape by connecting a USB keyboard, pressing F12, and escaping the kiosk. The impac...

7.4CVSS7.3AI score0.0043EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2022/05/11 12:00 a.m.110 views

Siemens SIMATIC WinCC Kiosk Mode Incorrect Initialization Vulnerability

SIMATIC PCS 7 is a process control system.SIMATIC WinCC is an automated data acquisition and monitoring SCADA system.SIMATIC WinCC Runtime Professional is a visual runtime platform for operators to control and monitor machines and equipment. A security vulnerability exists in Siemens SIMATIC WinC...

7.8CVSS6.7AI score0.00229EPSS
SaveExploits0References1
CVE
CVE
added 2022/05/10 9:46 a.m.98 views

CVE-2022-24287

This CVE (CVE-2022-24287) relates to Siemens SIMATIC WinCC/Kiosk Mode: an authenticated attacker could escape kiosk mode by opening the printer dialog when no printer is installed. Affected products include SIMATIC PCS 7 v8.2/v9.0/v9.1 and WinCC Runtime Professional v16/v17 (prior to Upd4), plus ...

7.8CVSS7.3AI score0.00229EPSS
SaveExploits0References1Affected Software3
CNNVD
CNNVD
added 2022/05/10 12:00 a.m.9 views

Siemens SIMATIC 安全漏洞

SIMATIC PCS 7 is a process control system.SIMATIC WinCC is an automated data acquisition and monitoring SCADA system.SIMATIC WinCC Runtime Professional is a visual runtime platform for operators to control and monitor machines and equipment. A security vulnerability exists in Siemens SIMATIC WinC...

7.8CVSS7.4AI score0.00229EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2022/05/10 12:00 a.m.9 views

PT-2022-2742 · Siemens · Simatic Pcs 7 +2

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS 7 versions V8.2 through V9.1 SIMATIC PCS 7 version V9.0 through V9.0 SP3 UC06 SIMATIC PCS 7 version V9.1 through V9.1 SP1 UC01 SIMATIC WinCC Runtime Professional versions V16 and earlier SIMATIC WinCC Runtime Professional version...

7.8CVSS7.4AI score0.00229EPSS
SaveExploits0References5
ICS
ICS
added 2022/05/10 12:00 a.m.258 views

Siemens SIMATIC WinCC

​​As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services ...

7.8CVSS7.8AI score0.00229EPSS
SaveExploits0References12
Schneier on Security
Schneier on Security
added 2022/02/21 12:31 p.m.19 views

Stealing Bicycles by Swapping QR Codes

This is a clever hack against those bike-rental kiosks: Theyre stealing Citi Bikes by switching the QR scan codes on two bicycles near each other at a docking station, then waiting for an unsuspecting cyclist to try to unlock a bike with his or her smartphone app. The app doesnt work for the ride...

0.6AI score
SaveExploits0
OSV
OSV
added 2021/11/03 10:15 a.m.8 views

CVE-2021-33210

An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can in the WebUI obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant...

4.3CVSS5.8AI score0.00753EPSS
SaveExploits0References2
NVD
NVD
added 2021/11/03 10:15 a.m.25 views

CVE-2021-33210

An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can in the WebUI obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant...

4.3CVSS0.00753EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/11/03 10:15 a.m.7 views

CVE-2021-33210

An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can in the WebUI obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant...

4.3CVSS6.1AI score0.00753EPSS
SaveExploits0References3
Prion
Prion
added 2021/11/03 10:15 a.m.19 views

Authentication flaw

An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can in the WebUI obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant...

4.3CVSS4.7AI score0.00753EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder