Information Disclosure Vulnerability in Haiwell C10S0R(-e) PLCs

C10S0R-e PLC is a product in the programmable logic controller PLC series of Xiamen Haiwei Technology Co. The Haiwell C10S0R-e PLC suffers from an information disclosure vulnerability that can be exploited by an attacker to obtain PLC configuration information via unauthorized construction of...

Memory Arbitrary Tampering Vulnerability in Haiwell C10S0R(-e) PLCs

C10S0R-e PLC is a product in the programmable logic controller PLC series of Xiamen Haiwei Technology Co. The Haiwell C10S0R-e PLC suffers from an arbitrary memory tampering vulnerability, which can be exploited by an attacker to control the output of the PLC via unauthorized construction of...

Remote Control Vulnerability in Haiwell C10S0R(-e) PLCs

C10S0R-e PLC is a product in the programmable logic controller PLC series of Xiamen Haiwei Technology Co. The Haiwell C10S0R-e PLC suffers from a remote control vulnerability, which can be exploited by an attacker to control PLC startup and stopping via unauthorized construction of specific netwo...

Password Leakage Vulnerability in DCCE MAC1100 PLCs

MAC1100 PLC is a programmable logic controller manufactured by Dalian Polytechnic Computer Control Engineering Co. A password leakage vulnerability exists in the DCCE MAC1100 PLC, which can be exploited by an attacker to obtain the PLC user name and password while the computer is connected to the...

Haiwell C10S0R(-e) PLC Arbitrarily Change Configuration Information Vulnerability

C10S0R-e PLC is a product in the programmable logic controller PLC series of Xiamen Haiwei Technology Co. The Haiwell C10S0R-e PLC is vulnerable to arbitrary change of configuration information, which can be exploited by an attacker to change the configuration information of the PLC through...

Denial of Service Vulnerability in DCCE MAC1100 PLCs

MAC1100 PLC is a programmable logic controller manufactured by Dalian Polytechnic Computer Control Engineering Co. A denial of service vulnerability exists in the DCCE MAC1100 PLC, which can be exploited by an attacker to cause the PLC to shut down and the CPU to deny service via unauthorized...

Arbitrary Memory Tampering Vulnerability in DCCE MAC1100 PLCs

The MAC1100 PLC Programmable Logic Controller PLC is a product in the Dalian Computer Control DCCE Programmable Logic Controller PLC series. The DCCE MAC1100 PLC suffers from an arbitrary memory tampering vulnerability. The vulnerability can be exploited to write to and tamper with the contents o...

Buffer overflow vulnerability in multiple Schneider Electric products (CNVD-2018-11262)

Schneider Electric Modicon M340, etc. are programmable logic controller products of Schneider Electric France. A buffer overflow vulnerability exists in the web service used to process SOAP requests in several Schneider Electric products. An attacker could exploit this vulnerability to cause a...

Information Disclosure Vulnerability in Hologic LE5109L PLCs

HELISE Group is a professional automation company integrating R&D, production, sales and technical service. With integrated Ethernet, PROFIBUS-DP, RS232 and RS485 interfaces, HELISE's PLCs have been widely used in electric power, chemical industry, metallurgy, energy and other fields. An...

Denial of Service Vulnerability in Hologic LE5109L PLC (CNVD-2018-08756)

HELISE Group is a professional automation company integrating R&D, production, sales and technical service. With integrated Ethernet, PROFIBUS-DP, RS232 and RS485 interfaces, HELISE's PLCs have been widely used in electric power, chemical industry, metallurgy, energy and other fields. A denial of...

Denial of Service Vulnerability in Tengen Controls T920 PLC (CNVD-2018-08788)

T-920 Programmable Logic Controller PLC is a product in the T9 series Programmable Logic Controller PLC series of China TengControl Technology TENGCONTROL TECHNOLOGY. The product is widely used in tobacco, petrochemical, water and other important industrial control site. A denial of service...

Denial of Service Vulnerability in Multiple Siemens Products (CNVD-2018-06025)

The SIMATIC CP 343-1 Advanced is an Ethernet communication module that supports PROFINET, the new generation of automation bus standards based on industrial Ethernet technology. 1500 is a programmable logic controller. A denial of service vulnerability exists in several Siemens products. An...

S7-SoftPLC Buffer Overflow DoS

The vulnerability of the programmable logic controller S7-SoftPLC arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Eaton ELCSoft Out-of-Bounds Access Remote Code Execution Vulnerability

The Eaton ELCSoft programmable logic control software runs on a PC and can help configure the ELC controller. An out-of-bounds access remote code execution vulnerability exists in Eaton ELCSoft, where memory access exceeds the end of the allocation buffer due to the program process failing to...

Eaton ELCSoft DEV File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability

The Eaton ELCSoft programmable logic control software runs on a PC and can help configure the ELC controller. An out-of-bounds write remote code execution vulnerability exists in Eaton ELCSoft, which can be exploited by an attacker to execute arbitrary code in the context of the current process...

Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Rockwell Automation Equipment: Allen-Bradley MicroLogix 1100 and 1400 Vulnerabilities: Predictable Value Range from Previous Values; Reusing a Nonce, Key Pair in Encryption; Information Exposure; Improper Restriction ...

CVE-2016-8354

An issue was discovered in Schneider Electric Unity PRO prior to V11.1. Unity projects can be compiled as x86 instructions and loaded onto the PLC Simulator delivered with Unity PRO. These x86 instructions are subsequently executed directly by the simulator. A specially crafted patched Unity...

OVEEN PLK110 Stack Overflow Code Execution

The vulnerability of the embedded software of the OVEEN PLC110 programmable logic controller lies in the lack of checks for the length of the file name during the generation of the error message when processing a read or write request for the file. This leads to buffer overflows in the stack...

OVEEN PLK110 Memory Overwrite

The vulnerability of the embedded software of the OVEEN PLK110 programmable logic controller is related to the existence of an undocumented capability in the write commands. Exploiting this vulnerability allows a malicious actor to perform overwrites in the system’s memory space writing data to a...

Schneider Electric Model TSXP572634M PLC Bypasses Certification Vulnerability

Schneider Electric Electric provides total solutions for the energy and infrastructure, industrial, data center and network, building and residential markets in more than 100 countries. When the configuration software is connected to the PLC, all computers that are successfully connected to the P...