The vulnerability of Siemens Sinumerik programmable logic controllers lies in buffer overflows in their applications, which allow attackers to execute arbitrary code with elevated privileges.

The vulnerability of Siemens Sinumerik programmable logic controllers is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to execute arbitrary code with elevated privileges...

The vulnerability of the TUNER web service on the TeNIX programmable logic controllers M1500 and M3000 allows a hacker to execute arbitrary code.

The vulnerability of the TUNER web service on the TeNIX programmable logic controllers M1500 and M3000 is related to the absence of name filtering when generating a 404 HTTP error page. As a result, the name of the non-existent webpage is passed unchanged to the generated error page. Exploiting...

Command Injection Vulnerability in NA300 PLC

The NA300 PLC is a mid-size programmable controller. A command injection vulnerability exists in the NA300 PLC. The vulnerability stems from the failure of the system's ehtdbg program to properly handle input parameters, which allows an attacker to bypass checks and inject commands via constructe...

Weak password vulnerability in NA300 PLC

The NA300 PLC is a mid-size programmable controller. A weak password vulnerability exists in the NNA300 PLC. An attacker could gain full control of the PLC through this vulnerability...

Buffer Overflow Vulnerability in NA300 PLCs

The NA300 PLC is a mid-size programmable controller. A buffer overflow vulnerability exists in the NA300 PLC. The vulnerability stems from et failing to properly handle functions. An attacker can overwrite the return address by constructing a variable length that exceeds variable v30...

NA300 PLC has a logic design flaw

The NA300 PLC is a mid-size programmable controller. A logic design vulnerability exists in the NA300 PLC. An attacker can illegally read the internal logic program of the PLC by constructing specific packets...

Unauthorized operation vulnerability in NA300 PLC (CNVD-2018-26208)

The NA300 PLC is a mid-size programmable controller. An unauthorized operation vulnerability exists in the NA300 PLC. An attacker can exploit the vulnerability to remotely tamper with system inputs and outputs, variable values, etc...

Delta WPLSoft suffers from a buffer overflow vulnerability

WPLSoft is a plc programming tool. A buffer overflow vulnerability exists in Delta WPLSoft. An attacker can construct malformed data to cause the software to crash...

The vulnerability of the microprogrammed software of Schneider Electric Modicon M221, caused by errors in handling exceptional states, allows a intruder to perform a system reboot.

The vulnerability of the microprogrammed software in Schneider Electric Modicon M221 programmable logic controllers arises due to errors in handling exceptional states. Exploiting this vulnerability can allow an attacker to remotely perform a system reboot...

CVE-2018-7790

An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product all references, all versions prior to firmware V1.6.2.0. The vulnerability allows unauthorized users to replay authentication sequences. If an attacker exploits this vulnerability and connects to a...

Schneider Electric Modicon M221 Authentication Sequence Replay Vulnerability

The Modicon M221 is a logic controller from Schneider Electric. The Schneider Electric Modicon M221 suffers from an authentication sequence replay vulnerability that can be exploited by an attacker to replay the authentication sequence, which can be used to connect to the Modicon M221 and upload...

Denial of Service Vulnerability in Hologic LE5109L PLC (CNVD-2018-18909)

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A denial of service vulnerability exists in the HELISE LE5109L PLC, which can be exploited by an attacker to cause a denial of service in the PLC by constructing specific private protocol...

Remote Controller Removal Vulnerability in HOLLYWOOD LE5109L PLCs

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A remote controller removal vulnerability exists in the Hologic LE5109L PLC, where an attacker can construct specific modbus packets to remotely remove all program and configuration...

Denial of Service Vulnerability in Hologic LE5109L PLC (CNVD-2018-18906)

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A denial of service vulnerability exists in the HELISE LE5109L PLC, which can be exploited by an attacker to cause the PLC to be remotely controlled by constructing specific private protoco...

Denial of Service Vulnerability in Hologic LE5109L PLC (CNVD-2018-18910)

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A denial of service vulnerability exists in the HELISE LE5109L PLC, which can be exploited by an attacker to cause a denial of service in the PLC by unauthorized construction of specific...

Arbitrary Program Removal Vulnerability in HOLLYWOOD LE5109L PLCs

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. An arbitrary program removal vulnerability exists in the HELISE LE5109L PLC, which can be exploited by an attacker to cause malicious removal of programs from the PLC controller via...

Remote Control Vulnerability in Haiwell C10S0R(-e) PLCs

C10S0R-e PLC is a product in the programmable logic controller PLC series of Xiamen Haiwei Technology Co. The Haiwell C10S0R-e PLC suffers from a remote control vulnerability, which can be exploited by an attacker to control PLC startup and stopping via unauthorized construction of specific netwo...

Memory Arbitrary Tampering Vulnerability in Haiwell C10S0R(-e) PLCs

C10S0R-e PLC is a product in the programmable logic controller PLC series of Xiamen Haiwei Technology Co. The Haiwell C10S0R-e PLC suffers from an arbitrary memory tampering vulnerability, which can be exploited by an attacker to control the output of the PLC via unauthorized construction of...

Password Leakage Vulnerability in DCCE MAC1100 PLCs

MAC1100 PLC is a programmable logic controller manufactured by Dalian Polytechnic Computer Control Engineering Co. A password leakage vulnerability exists in the DCCE MAC1100 PLC, which can be exploited by an attacker to obtain the PLC user name and password while the computer is connected to the...

Denial of Service Vulnerability in DCCE MAC1100 PLCs

MAC1100 PLC is a programmable logic controller manufactured by Dalian Polytechnic Computer Control Engineering Co. A denial of service vulnerability exists in the DCCE MAC1100 PLC, which can be exploited by an attacker to cause the PLC to shut down and the CPU to deny service via unauthorized...