CVE-2021-22816

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Service of the RTU when receiving a specially crafted request over Modbus, and the RTU is configured as a Modbus server. Affected Products: SCADAPack 312E, 313E, 314E, 330E, 333E, 334...

CVE-2021-22816

The CVE-2021-22816 issue affects Schneider Electric SCADAPack RTUs (models 312E, 313E, 314E, 330E, 333E, 334E, 337E, 350E, 357E) running firmware 8.18.1 and earlier. The root cause is an improper check for unusual or exceptional conditions (CWE-754) that can lead to a Denial of Service when the R...

CVE-2021-22816: Improper Check for Unusual or Exceptional Conditions

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Service of the RTU when receiving a specially crafted request over Modbus, and the RTU is configured as a Modbus server. Affected Products: SCADAPack 312E, 313E, 314E, 330E, 333E, 334...

SCADAPack 代码问题漏洞

SCADAPack is a Schneider-electric intelligent field controller that combines the monitoring and communication capabilities of a Remote Terminal Unit RTU with the processing and data logging capabilities of a Programmable Logic Controller PLC to provide superior functionality for remote processes...

Cisco Firepower Threat Defense Snort Modbus DoS (cisco-sa-snort-dos-9D3hJLuj)

According to its self-reported version, Cisco FTD Software is affected by a denial of service DoS vulnerability in its Snort Modbus component due to an integer overflow. An unauthenticated, remote attacker can exploit this issue to cause the Snort process to stop responding. Please see the includ...

Critical Cisco StarOS Bug Grants Root Access via Debug Mode

Cisco released a security update warning about a handful of vulnerabilities lurking in its networking technology, led by a critical bug in the company’s StarOS debug services. Cisco pushed out a fix for its Cisco StarOS Software on Wednesday. Jan. 19. In its advisory, the company said that the fl...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. CISA encourages...

Multiple Cisco Products Snort Modbus Denial of Service Vulnerability

A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit th...

NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

...

PT-2022-2310 · Snort +1 · Snort +1

Name of the Vulnerable Software and Affected Versions: Snort affected versions not specified Description: The issue is caused by an integer overflow while processing Modbus traffic, allowing a remote attacker to cause a denial of service DoS condition on an affected device. An attacker could...

Cisco Products Snort 输入验证错误漏洞

Cisco Products Snort is a Snort engine for Cisco Products from Cisco USA. An input validation error vulnerability exists in Cisco Products Snort Modbus that stems from an integer overflow when processing Modbus traffic. An attacker could cause the Snort process to hang by sending carefully crafte...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service. The vulnerability exists due to a NULL pointer exception in the Modbus dissector in Wireshark which allows denial of service via packet injection or crafted capture file...

Security update for wireshark (moderate)

openSUSE Security Update: Security update for wireshark Announcement ID: openSUSE-SU-2021:1566-1 Rating: moderate References: 1192830 Cross-References: CVE-2021-39920 CVE-2021-39921 CVE-2021-39922 CVE-2021-39924 CVE-2021-39925 CVE-2021-39926 CVE-2021-39928 CVE-2021-39929 CVSS scores: CVE-2021-399...

USN-5173-2: libmodbus vulnerabilities

USN-5173-1 fixed vulnerabilities in libmodbus. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that libmodbus incorrectly handled inputs. An attacker could possibly use this issue to cause a denial of service o...

OPENSUSE-SU-2021:3938-1 Security update for wireshark

This update for wireshark fixes the following issues: - Update to Wireshark 3.4.10: - CVE-2021-39920: IPPUSB dissector crash bsc1192830. - CVE-2021-39921: Modbus dissector crash bsc1192830. - CVE-2021-39922: C12.22 dissector crash bsc1192830. - CVE-2021-39924: Bluetooth DHT dissector large loop...

USN-5173-1: libmodbus vulnerabilities

It was discovered that libmodbus incorrectly handled inputs. An attacker could possibly use this issue to cause a denial of service or other unspecified impact...

The vulnerability of the Modbus analyzer component in Wireshark allows a hacker to trigger a service failure.

The vulnerability of the Modbus analyzer component in Wireshark relates to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor to cause service failures by injecting specially created packets...

Debian: Security Advisory (DLA-2825-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-39921

A NULL pointer exception flaw was found in Wireshark. A process failure on crafted or malformed input in the Modbus dissector can cause a denial of service via a packet injection or crafted capture file...

[SECURITY] [DLA 2825-1] libmodbus security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2825-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz November 22, 2021 https://wiki.debian.org/LTS -...