367 matches found
多款 Siemens 产品输入验证错误漏洞
SCALANCE X switches are used to connect to industrial components such as programmable logic controllers PLCs or human-machine interfaces HMIs.SIPLUS extreme is designed for reliable operation under extreme conditions.Siemens SCALANCE X-300 Switch Family Devices are vulnerable to an input validati...
ASUS RT-AX56U 路径遍历漏洞
The ASUS RT-AX56U is a wireless router from ASUS of Taiwan, China. A path traversal vulnerability exists in the ASUS RT-AX56U updatePLC/PORT file, which can be exploited by an attacker to overwrite system files by uploading another PLC/PORT file with the same filename, resulting in a service...
CVE-2021-32980
Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 does not protect against additional software programming connections. An attacker can connect to the PLC while an existing connection is already active...
The vulnerability of the Simatic programmable logic controller’s software lies in the improper release of memory before deleting the last reference, allowing a intruder to trigger a service failure.
The vulnerability of the Simatic programmable logic controller’s software is related to the improper release of memory before deleting the last references. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...
Mitsubishi Electric MELSEC iQ-F series 加密问题漏洞
Mitsubishi Electric Automation China Co., Ltd. is a wholly-owned enterprise in China invested by Mitsubishi Electric Corporation. It mainly produces mechanical appliances for power distribution including low-voltage circuit breakers, electromagnetic openers and closers, electrical processing...
The vulnerability of the Simatic programmable logic controller’s software relates to operations involving resources after their expiration time. This allows a intruder to cause a service failure.
The vulnerability of the Simatic programmable logic controller’s software relates to operations involving resources after their expiration date. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted packets...
The vulnerability of the Simatic programmable logic controller’s software relates to operations involving resources after their expiration time. This allows a intruder to cause a service failure.
The vulnerability of the Simatic programmable logic controller’s software relates to operations involving resources after their expiration date. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted packets...
CVE-2022-23971
ASUS RT-AX56U’s updatePLC/PORT file has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another PLC/PORT file with the same file name, which results in service...
Schneider Electric Modicon Improper Input Validation (CVE-2021-22800)
A CWE-20: Improper Input Validation vulnerability exists that could cause a Denial of Service when a crafted packet is sent to the controller over network port 1105/TCP. Affected Product: Modicon M218 Logic Controller V5.1.0.6 and prior This plugin only works with Tenable.ot. Please visit...
Schneider Electric Modicon M218 Logic Controller Input Validation Error Vulnerability
Schneider Electric Modicon M218 Logic Controller, a programmable logic controller from Schneider Electric, France, is vulnerable to An input validation error vulnerability can be exploited to send specially crafted packets to the controller via network port 1105/TCP, resulting in a denial of...
CVE-2021-22800
A CWE-20: Improper Input Validation vulnerability exists that could cause a Denial of Service when a crafted packet is sent to the controller over network port 1105/TCP. Affected Product: Modicon M218 Logic Controller V5.1.0.6 and prior...
CVE-2021-22800
A CWE-20: Improper Input Validation vulnerability exists that could cause a Denial of Service when a crafted packet is sent to the controller over network port 1105/TCP. Affected Product: Modicon M218 Logic Controller V5.1.0.6 and prior...
Input validation
A CWE-20: Improper Input Validation vulnerability exists that could cause a Denial of Service when a crafted packet is sent to the controller over network port 1105/TCP. Affected Product: Modicon M218 Logic Controller V5.1.0.6 and prior...
CVE-2021-22800
A CWE-20: Improper Input Validation vulnerability exists that could cause a Denial of Service when a crafted packet is sent to the controller over network port 1105/TCP. Affected Product: Modicon M218 Logic Controller V5.1.0.6 and prior...
CVE-2021-22800
The CVE-2021-22800 issue affects Schneider Electric Modicon M218 Logic Controller (V5.1.0.6 and prior). It stems from CWE-20 Improper Input Validation and can lead to Denial of Service when a crafted packet is sent to the controller via network port 1105/TCP. The affected component/behavior is an...
spaceLYnk 跨站脚本漏洞
The Schneider Electric spaceLYnk is a programmable logic controller from Schneider Electric France. The spaceLYnk suffers from a cross-site scripting vulnerability that originated when an attacker could use the vulnerability to inject and execute arbitrary malicious JavaScript code in the target...
Siemens SIMATIC S7-1500 系列产品输入验证错误漏洞
SIMATIC Drive Controller family products are machines designed for production automation, combining the functionality of the SIMATIC S7-1500 CPU and the SINAMICS S120 drive control.SIMATIC S7-1200 CPU family products are designed for discrete and continuous control in industrial environments such...
Rockwell Automation Allen-Bradley Micrologix 1100 Improper Handling of Length Parameter Inconsistency (CVE-2020-6111)
An exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley MicroLogix 1100 Programmable Logic Controller Systems Series B FRN 16.000, Series B FRN 15.002, Series B FRN 15.000, Series B FRN 14.000, Series B FRN 13.000, Series B FRN 12.000, Series B FRN 11.000...
CVE-2021-37401
An attacker may obtain the user credentials from file servers, backup repositories, or ZLD files saved in SD cards. As a result, the PLC user program may be uploaded, altered, and/or downloaded...