SQL Injection Vulnerability in Thermal Network Monitoring System of Qingdao He Sheng Si Zhuang Measurement and Control Technology Co.

Qingdao HeShengShiZhuang Measurement and Control Technology Co., Ltd. is a company specializing in the development of thermal energy metering and monitoring systems, flow meters, pressure instruments and regulating instruments. Ltd. has a SQL injection vulnerability in its thermal network...

Siemens SICAM MMU, SGU and T Information Disclosure Vulnerabilities

SICAM T is a digital measurement sensor that allows the measurement of power in the non-electrical network in a single unit.ICAM-MMU Measurement and Monitoring Unit is a power monitoring unit that allows the measurement of power in the grid in a single unit.SICAM SGU Discontinued is a Smart Grid...

Siemens SICAM MMU, SGU and T Authentication Bypass Vulnerability

SICAM T is a digital measurement sensor that allows the measurement of power in the non-electrical network in a single unit.ICAM-MMU Measurement and Monitoring Unit is a power monitoring unit that allows the measurement of power in the grid in a single unit.SICAM SGU Discontinued is a Smart Grid...

Siemens SICAM MMU, SGU and T Sensitive Information Disclosure Vulnerability

SICAM T is a digital measurement sensor that allows the measurement of power in the non-electrical network in a single unit.ICAM-MMU Measurement and Monitoring Unit is a power monitoring unit that allows the measurement of power in the grid in a single unit.SICAM SGU Discontinued is a Smart Grid...

CVE-2019-18254

BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to the CardioMessenger can disclose medical measurement data and the serial number from the implanted cardiac device the CardioMessenger is paired with...

CVE-2019-18254

BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to the CardioMessenger can disclose medical measurement data and the serial number from the implanted cardiac device the CardioMessenger is paired with...

Intelligent Heat Measurement Management System of Acuity Brands (Beijing) Instrumentation Co.

Acres Beijing Instrumentation Co., Ltd. is a high-tech enterprise specializing in the research and development, production, sales and service of intelligent instrumentation. A universal password login vulnerability exists in the Intelligent Heat Measurement Management System of Acres Beijing...

Heat Measurement and Temperature Control Integration Analysis System of Shandong Lichuang Technology Co.

Shandong Lichuang Technology Co., Ltd. heating measurement and temperature control integrated analysis system is a data analysis system designed with energy saving, consumption reduction and cost saving as the starting point according to the current guiding direction of energy saving and emission...

DEBIAN-CVE-2020-11047

In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bounds read in autodetectrecvbandwidthmeasureresults. A malicious server can extract up to 8 bytes of client memory with a manipulated message by providing a short input and reading the measurement result data. This has been patched in 2.0...

UBUNTU-CVE-2020-11047

In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bounds read in autodetectrecvbandwidthmeasureresults. A malicious server can extract up to 8 bytes of client memory with a manipulated message by providing a short input and reading the measurement result data. This has been patched in 2.0...

CVE-2019-14131

Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, MSM8998, Nicoba...

Design/Logic Flaw

Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, MSM8998, Nicoba...

CVE-2019-14131

Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, MSM8998, Nicoba...

CVE-2019-14131

CVE-2019-14131 is an out-of-bounds write in the WLAN radio measurement handling (rrm) when a station receives multiple invalid rrm measurement requests from an AP. Affected Qualcomm Snapdragon platforms include Snapdragon Auto/Compute/Consumer IOT/Industrial IOT/Mobile, e.g., APQ8053, APQ8096AU, ...

CVE-2020-2943

CVE-2020-2943 affects Oracle Financial Services Applications Liquidity Risk Measurement and Management, UI component. Affected versions: 8.0.7 and 8.0.8. Vulnerability allows a low-privileged attacker with network access via HTTP to compromise the system, enabling unauthorized creation, deletion ...

UBUNTU-CVE-2020-10941

Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information an RSA private key by measuring cache usage during an import...

The Ultimate Security Budget Excel Template

Sound security budget planning and execution are essential for the CIO’s/CISO’s success. Now, for the first time, The Ultimate Security Budget Plan & Track Excel template download here provides security executives a clear and intuitive tool to keep track of planned vs. actual spend, ensuring that...

Denial of Service Vulnerability in DMP3391 Measurement and Control Device

The DMP3391 is a monitoring device adapted to the different requirements of substations and power plants of all voltage levels. A denial of service vulnerability exists in the DMP3391, which can be exploited by an attacker to cause a system crash...

Jiangsu Jinzhi Technology Co., Ltd. iPACS-5772 suffers from denial-of-service vulnerability (CNVD-2020-01593)

iPACS-5772 is a measurement and control device with remote control, telemetry, telecommunication functions, logic blocking function, programmed operation function, device self-test, time-alignment function, and the device is equipped with software time-alignment and hardware time-alignment...

Denial of Service Vulnerability in PRS-7741 Measurement and Control Unit of Changyuan Shamrui

Changyuan Shamrui PRS-7741 measurement and control device is a measurement and control equipment with telemetry, telecommunication, remote control, remote adjustment and other remote functions using Vxworks operating system. A denial of service vulnerability exists in the PRS-7741 measurement and...