CVE-2021-22779

The CVE-2021-22779 entry describes an Authentication Bypass by Spoofing vulnerability affecting Schneider Electric products including EcoStruxure Control Expert (pre- and post‑patch variants), EcoStruxure Process Expert, SCADAPack RemoteConnect for x70, and Modicon M580/M340 CPUs. The flaw enable...

CVE-2021-22779

Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, SCADAPack...

Schneider Electric EcoStruxure Control Expert security vulnerabilities

Schneider Electric EcoStruxure Control Expert formerly known as Unity Pro is a suite of programming software for Schneider Electric logic controller products from Schneider Electric, France. Schneider Electric EcoStruxure Control Expert has a security vulnerability in several of its products that...

PT-2021-7776

Name of the Vulnerable Software and Affected Versions Easergy T200 versions Modbus SC2-04MOD-07000100 and earlier Easergy T200 versions IEC104 SC2-04IEC-07000100 and earlier Easergy T200 versions DNP3 SC2-04DNP-07000102 and earlier Description The issue is related to the absence of authentication...

isf

This is an Industrial Exploitation Framework ISF repository, a Python-based framework for exploitation and testing of industrial control systems ICS. The framework is similar to Metasploit and is designed to be used for penetration testing and vulnerability assessment of ICS devices. The reposito...

CVE-2021-21002

In Phoenix Contact FL COMSERVER UNI in versions 2.40 a invalid Modbus exception response can lead to a temporary denial of service...

Denial of service

In Phoenix Contact FL COMSERVER UNI in versions 2.40 a invalid Modbus exception response can lead to a temporary denial of service...

CVE-2021-21002

CVE-2021-21002 affects Phoenix Contact FL COMSERVER UNI in versions

CVE-2021-21002 Denial of Service in Phoenix Contact FL COMSERVER UNI products

In Phoenix Contact FL COMSERVER UNI in versions 2.40 a invalid Modbus exception response can lead to a temporary denial of service...

PT-2021-14329

Name of the Vulnerable Software and Affected Versions: Phoenix Contact FL COMSERVER UNI versions prior to 2.40 Description: The issue is related to an invalid Modbus exception response that can cause a temporary denial of service. Recommendations: For versions prior to 2.40, update to version 2.4...

CVE-2021-21002: Missing Release of Resource after Effective Lifetime

In Phoenix Contact FL COMSERVER UNI in versions 2.40 a invalid Modbus exception response can lead to a temporary denial of service...

Phoenix Contact FL COMSERVER UNI security vulnerability

The Phoenix Contact FL COMSERVER UNI is an interface converter from Phoenix Contac Phoenix Contact, Germany. Serial Device Server for Converting Serial 232/422/485 Interfaces to Ethernet A security vulnerability exists in the Phoenix Contact FL COMSERVER UNI, which stems from an invalid Modbus...

CVE-2021-21002

In Phoenix Contact FL COMSERVER UNI in versions 2.40 a invalid Modbus exception response can lead to a temporary denial of service...

CVE-2021-22764

A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially...

CVE-2021-22764

A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially...

Authentication flaw

A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially...

CVE-2021-22764

A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially...

CVE-2021-22764

CVE-2021-22764 is an improper authentication vulnerability affecting Schneider Electric PowerLogic PM55xx, PM8ECC, EGX100, and EGX300. The issue can cause loss of connectivity to the device over Modbus TCP when an attacker sends a specially crafted HTTP request. Public documents identify the affe...

CVE-2021-22764

A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially...

CVE-2021-22764

A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially...