521 matches found
The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST controllers, related to deficiencies in the validation of user-input data, allows attackers to execute cross-site scripting (XSS) attacks.
The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST distributed controllers is related to deficiencies in the validation of user-input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks remotely...
The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST controllers, related to insufficient validation of input data, allows attackers to execute cross-site scripting (XSS) attacks.
The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST distributed controllers is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks remotely...
The vulnerability of the sub_48AC20 function in D-Link DIR-882 A1 wireless router’s microprogramming software allows for the execution of arbitrary code.
The vulnerability of the sub48AC20 function in D-Link DIR-882 A1 wireless router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint (CE) device, related to deficiencies in access control to the version-controlled repository, allows a perpetrator to gain read, modify, or delete access to data.
The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint device is related to deficiencies in access control to the version-controlled repository. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data...
The vulnerability of the microprogramming software for FS S3900-24T4S devices, due to deficiencies in access control, allows attackers to escalate their privileges and bypass the administrator password.
The vulnerability of the microprogramming software for FS S3900-24T4S switches is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges and bypass the administrator password...
The vulnerability of the microprogramming software in Schneider Electric Easergy P40 relay protection and control devices allows a intruder to manipulate network traffic.
The vulnerability of microprogrammed software in relay protection and control devices from Schneider Electric’s Easergy P40 lies in the use of rigidly encrypted account data. Exploiting this vulnerability could allow a malicious actor to manipulate network traffic remotely...
The vulnerability of the microprogramming software used in Schneider Electric Modicon programmable logic controllers lies in the insufficient checking of unusual or exceptional states. This allows a intruder to trigger a service failure.
The vulnerability of the microprogrammed software in Schneider Electric Modicon programmable logic controllers is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to trigger malfunctions during maintenance operations...
The vulnerability of D-Link DIR-825 router’s microprogramming software lies in the lack of protection for service data, allowing attackers to disclose the protected information.
The vulnerability of D-Link DIR-825 router’s microprogramming software is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information by requesting the routerinfo.xml file...
The vulnerability of the microprogramming software in Cisco Business Wireless Access Points allows a intruder to gain access to the guest portal without authentication.
The vulnerability of microprogrammed software in Cisco Business Wireless Access Points involves bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to gain access to the guest portal without being authenticated...
The vulnerability in the web interface for managing microprogramming software on Cisco Small Business Series switches allows a perpetrator to gain unauthorized access to protected information.
The vulnerability in the web interface for managing microprogrammed software in Cisco Small Business Series switches is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...
The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software lies in the improper limitation of the path name in the restricted access catalog, allowing attackers to gain unauthorized access to protected information.
The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software is related to incorrect restrictions on the path name in the restricted access catalog. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected...
The vulnerability of the microprogramming software of Modicon PAC controllers and PLCs included in EcoStruxure Control Expert and EcoStruxure Process Expert allows a intruder to trigger maintenance failures.
The vulnerability of the microprogramming software of Modicon PAC controllers and PLCs included in EcoStruxure Control Expert and EcoStruxure Process Expert lies in the storage of data beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to trigger service...
The vulnerability of the web interface of the microprogramming software for Cisco Small Business Series switches allows a hacker to execute arbitrary code.
The vulnerability of the web interface of the microprogramming software for Cisco Small Business Series switches is related to the possibility of buffer overflow attacks based on a stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software relates to the possibility of introducing commands that allow a hacker to execute arbitrary code under the root user’s context.
The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software is related to the possibility of executing commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the root user...
The vulnerability of TP-Link T2600G-28SQ switch’s microprogramming software, related to errors in managing registration data, allows a intruder to gain unauthorized access to protected information.
The vulnerability of TP-Link T2600G-28SQ switch’s microprogramming software is related to errors in managing registration data when processing SSH keys. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system, related to access control deficiencies, allows a intruder to bypass access restrictions.
The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system is related to lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to bypass access restrictio...
The vulnerability of the Meraki component of the Cisco IOS XR operating system’s microprogramming software for Cisco Catalyst 9200 and Cisco Catalyst 9300 devices allows attackers to increase their privileges.
The vulnerability of the Meraki component of the Cisco IOS XR operating system’s microprogramming software for Cisco Catalyst 9200 and Cisco Catalyst 9300 is caused by buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of microprogramming software in Hikvision Hybrid SAN storage systems, related to access control errors, allows attackers to elevate their privileges to the level of administrators.
The vulnerability of the microprogramming software of Hikvision Hybrid SAN storage systems is related to access control errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to elevate their privileges to the level of an administrator...
The vulnerability of the microprogramming software for Schneider Electric’s spaceLYnk and homeLYnk logic controllers arises from incorrect restrictions on the path name in the restricted access catalog. This allows attackers to trigger a service failure.
The vulnerability of the microprogramming software for Schneider Electric’s spaceLYnk and homeLYnk logic controllers is related to an incorrect limitation on the path name in the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to trigger a service failure...
The vulnerability of the microprogramming software of Siemens SCALANCE industrial switches allows a intruder to execute arbitrary code.
The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending specially created packets...