Lucene search
+L

731 matches found

OSV
OSV
•added 2022/05/20 1:15 p.m.•15 views

CVE-2022-24287

A vulnerability has been identified in SIMATIC PCS 7 V8.2 All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3 UC06, SIMATIC PCS 7 V9.1 All versions V9.1 SP1 UC01, SIMATIC WinCC Runtime Professional V16 and earlier All versions, SIMATIC WinCC Runtime Professional V17 All versions V17 Upd4,...

7.8CVSS5.7AI score0.00238EPSS
SaveExploits0References1
NVD
NVD
•added 2022/05/20 1:15 p.m.•42 views

CVE-2022-24287

A vulnerability has been identified in SIMATIC PCS 7 V8.2 All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3 UC06, SIMATIC PCS 7 V9.1 All versions V9.1 SP1 UC01, SIMATIC WinCC Runtime Professional V16 and earlier All versions, SIMATIC WinCC Runtime Professional V17 All versions V17 Upd4,...

7.8CVSS0.00238EPSS
SaveExploits0References1
Prion
Prion
•added 2022/05/20 1:15 p.m.•35 views

Design/Logic Flaw

A vulnerability has been identified in SIMATIC PCS 7 V8.2 All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3 UC06, SIMATIC PCS 7 V9.1 All versions V9.1 SP1 UC01, SIMATIC WinCC Runtime Professional V16 and earlier All versions, SIMATIC WinCC Runtime Professional V17 All versions V17 Upd4,...

4.6CVSS7.3AI score0.00238EPSS
SaveExploits0References1Affected Software3
Rockylinux
Rockylinux
•added 2022/05/17 6:35 a.m.•27 views

new packages: gnome-kiosk

An update is available for gnome-kiosk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

2.2AI score
SaveExploits0
OSV
OSV
•added 2022/05/16 6:15 a.m.•12 views

CVE-2022-29586

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode...

7.4CVSS5.8AI score0.00447EPSS
SaveExploits0References2
NVD
NVD
•added 2022/05/16 6:15 a.m.•28 views

CVE-2022-29586

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode...

7.4CVSS0.00447EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/05/16 6:15 a.m.•10 views

CVE-2022-29586

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode...

7.4CVSS5.9AI score0.00447EPSS
SaveExploits0References3
Prion
Prion
•added 2022/05/16 6:15 a.m.•21 views

Code injection

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode...

6.9CVSS7.4AI score0.00447EPSS
SaveExploits0References2Affected Software45
Cvelist
Cvelist
•added 2022/05/16 5:35 a.m.•31 views

CVE-2022-29586

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode...

7.6AI score0.00447EPSS
SaveExploits0References2
CVE
CVE
•added 2022/05/16 5:35 a.m.•107 views

CVE-2022-29586

The CVE-2022-29586 issue affects Konica Minolta bizhub MFP devices released before 2022-04-14. The root cause is a sandbox escape vulnerability that allows an attacker with physical access to trigger a kiosk-mode escape by connecting a USB keyboard, pressing F12, and escaping the kiosk. The impac...

7.4CVSS7.3AI score0.00447EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/16 12:00 a.m.•4 views

CVE-2022-29586: Undefined Security Weakness

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode...

7.4CVSS7.3AI score0.00447EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/05/11 12:00 a.m.•120 views

Siemens SIMATIC WinCC Kiosk Mode Incorrect Initialization Vulnerability

SIMATIC PCS 7 is a process control system.SIMATIC WinCC is an automated data acquisition and monitoring SCADA system.SIMATIC WinCC Runtime Professional is a visual runtime platform for operators to control and monitor machines and equipment. A security vulnerability exists in Siemens SIMATIC WinC...

7.8CVSS6.7AI score0.00238EPSS
SaveExploits0References1
CVE
CVE
•added 2022/05/10 9:46 a.m.•114 views

CVE-2022-24287

This CVE (CVE-2022-24287) relates to Siemens SIMATIC WinCC/Kiosk Mode: an authenticated attacker could escape kiosk mode by opening the printer dialog when no printer is installed. Affected products include SIMATIC PCS 7 v8.2/v9.0/v9.1 and WinCC Runtime Professional v16/v17 (prior to Upd4), plus ...

7.8CVSS7.3AI score0.00238EPSS
SaveExploits0References1Affected Software3
Positive Technologies
Positive Technologies
•added 2022/05/10 12:00 a.m.•17 views

PT-2022-2742 · Siemens · Simatic Pcs 7 +2

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS 7 versions V8.2 through V9.1 SIMATIC PCS 7 version V9.0 through V9.0 SP3 UC06 SIMATIC PCS 7 version V9.1 through V9.1 SP1 UC01 SIMATIC WinCC Runtime Professional versions V16 and earlier SIMATIC WinCC Runtime Professional version...

7.8CVSS7.4AI score0.00238EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/10 12:00 a.m.•3 views

CVE-2022-24287: Initialization of a Resource with an Insecure Default

A vulnerability has been identified in SIMATIC PCS 7 V8.2 All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3 UC06, SIMATIC PCS 7 V9.1 All versions V9.1 SP1 UC01, SIMATIC WinCC Runtime Professional V16 and earlier All versions, SIMATIC WinCC Runtime Professional V17 All versions V17 Upd4,...

7.8CVSS7AI score0.00238EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/05/10 12:00 a.m.•20 views

Siemens SIMATIC 安全漏洞

SIMATIC PCS 7 is a process control system.SIMATIC WinCC is an automated data acquisition and monitoring SCADA system.SIMATIC WinCC Runtime Professional is a visual runtime platform for operators to control and monitor machines and equipment. A security vulnerability exists in Siemens SIMATIC WinC...

7.8CVSS7.4AI score0.00238EPSS
SaveExploits0References6
ICS
ICS
•added 2022/05/10 12:00 a.m.•269 views

Siemens SIMATIC WinCC

​​As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services ...

7.8CVSS7.8AI score0.00238EPSS
SaveExploits0References12
Schneier on Security
Schneier on Security
•added 2022/02/21 12:31 p.m.•20 views

Stealing Bicycles by Swapping QR Codes

This is a clever hack against those bike-rental kiosks: Theyre stealing Citi Bikes by switching the QR scan codes on two bicycles near each other at a docking station, then waiting for an unsuspecting cyclist to try to unlock a bike with his or her smartphone app. The app doesnt work for the ride...

0.6AI score
SaveExploits0
OSV
OSV
•added 2021/11/03 10:15 a.m.•17 views

CVE-2021-33210

An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can in the WebUI obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant...

4.3CVSS5.8AI score0.00778EPSS
SaveExploits0References2
NVD
NVD
•added 2021/11/03 10:15 a.m.•32 views

CVE-2021-33210

An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can in the WebUI obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant...

4.3CVSS0.00778EPSS
SaveExploits0References2
Rows per page
Query Builder