The vulnerability of Rockwell Automation’s Modbus TCP Server AO lies in the lack of protection for service data, which allows attackers to disclose the protected information.

The vulnerability of Rockwell Automation’s Modbus TCP Server AOI lies in the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

CVE-2023-25619

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol...

Design/Logic Flaw

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol...

CVE-2023-25619

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol...

CVE-2023-25619

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol...

CVE-2023-25619

CVE-2023-25619 concerns Schneider Electric Modicon Modbus TCP where a CWE-754 improper check for unusual or exceptional conditions could cause a denial of service of the controller. Affected product family is Schneider Electric Modicon components using Modbus TCP; root cause is improper validatio...

CVE-2023-1285

Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" allows a remote unauthenticated attacker to cause a denial-of-service DoS condition in Ethernet communication by sending a large number of specially...

Race condition

Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" allows a remote unauthenticated attacker to cause a denial-of-service DoS condition in Ethernet communication by sending a large number of specially...

CVE-2023-1285

CVE-2023-1285 describes a signal handler race condition in Mitsubishi Electric India GC-ENET-COM (GOC35 series) where units with serial numbers starting with 16 are vulnerable. An unauthenticated remote attacker can cause a DoS in Ethernet communications by sending a flood of specially crafted UD...

CVE-2023-1285

Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" allows a remote unauthenticated attacker to cause a denial-of-service DoS condition in Ethernet communication by sending a large number of specially...

CVE-2023-1285

Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" allows a remote unauthenticated attacker to cause a denial-of-service DoS condition in Ethernet communication by sending a large number of specially...

PT-2023-2957 · Schneider Electric · Modicon

Name of the Vulnerable Software and Affected Versions: Schneider Electric Modicon affected versions not specified Description: A vulnerability exists due to improper check for unusual or exceptional conditions, which could cause denial of service of the controller when communicating over the Modb...

Rockwell Automation Modbus TCP AOI Server

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: Modbus TCP Server Add-On Instruction AOI Vulnerability: Exposure of Sensitive Information to an Unauthorized Actor 2. RISK EVALUATION Successful exploitation of this...

PT-2023-9779 · Mitsubishi · Gc-Enet-Com

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric India GC-ENET-COM versions with the first 2 digits of the 11-digit serial number of the unit being "16" Description: The issue is related to a Signal Handler Race Condition that allows a remote unauthenticated attacker to...

Hitachi Energy RTU500 series Improper Input Validation (CVE-2022-28613)

A vulnerability in the HCI Modbus TCP COMPONENT of Hitachi Energy RTU500 series CMU Firmware that is caused by the validation error in the length information carried in MBAP header allows an ATTACKER to reboot the device by sending a special crafted message. This issue affects: Hitachi Energy...

Rockwell Automation Modbus TCP AOI Information Disclosure Vulnerability

Rockwell Automation Modbus TCP AOI is a Modbus server from Rockwell USA. An information disclosure vulnerability exists in the Rockwell Automation Modbus TCP AOI, which can be exploited by an attacker to read the Modbus TCP server AOI information of a connected device...

CVE-2023-0027

Rockwell Automation Modbus TCP Server AOI prior to 2.04.00 is vulnerable to an unauthorized user sending a malformed message that could cause the controller to respond with a copy of the most recent response to the last valid request. If exploited, an unauthorized user could read the connected...

Information disclosure

Rockwell Automation Modbus TCP Server AOI prior to 2.04.00 is vulnerable to an unauthorized user sending a malformed message that could cause the controller to respond with a copy of the most recent response to the last valid request. If exploited, an unauthorized user could read the connected...

CVE-2023-0027 Rockwell Automation Modbus TCP AOI Server Could Leak Sensitive Information

Rockwell Automation Modbus TCP Server AOI prior to 2.04.00 is vulnerable to an unauthorized user sending a malformed message that could cause the controller to respond with a copy of the most recent response to the last valid request. If exploited, an unauthorized user could read the connected...

CVE-2023-0027 Rockwell Automation Modbus TCP AOI Server Could Leak Sensitive Information

Rockwell Automation Modbus TCP Server AOI prior to 2.04.00 is vulnerable to an unauthorized user sending a malformed message that could cause the controller to respond with a copy of the most recent response to the last valid request. If exploited, an unauthorized user could read the connected...