Lucene search
K

1668 matches found

ICS
ICS
added 2018/01/09 12:0 a.m.38 views

Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers

CVSS v3 8.6 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Rockwell Automation Equipment: Allen-Bradley MicroLogix 1400 Controllers Vulnerability: Buffer Overflow AFFECTED PRODUCTS The following versions of MicroLogix 1400 Controllers, a PLC, are affected: MicroLogix 1400...

10CVSS9.9AI score0.07145EPSS
Exploits0References2
CNVD
CNVD
added 2017/11/21 12:0 a.m.2 views

Belden Hirschmann Tofino Xenon Security Appliance Protocol Filter Evasion Vulnerability

The Tofino Xenon security appliance is the ideal solution for segmenting control networks into secure zones. A protocol filter evasion vulnerability exists in the Tofino Xenon security appliance prior to version 03.2.00. The vulnerability arises because the ModBus DPI filter improperly handles th...

9.8CVSS7AI score0.01397EPSS
Exploits0References1
NVD
NVD
added 2017/11/20 3:29 p.m.21 views

CVE-2017-11401

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering...

9.8CVSS7.8AI score0.01397EPSS
Exploits0References2
OSV
OSV
added 2017/11/20 3:29 p.m.3 views

CVE-2017-11401

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering...

9.8CVSS5.8AI score0.01397EPSS
Exploits0References2
Prion
Prion
added 2017/11/20 3:29 p.m.23 views

Design/Logic Flaw

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering...

7.5CVSS7.7AI score0.01397EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2017/11/20 3:0 p.m.26 views

CVE-2017-11401

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering...

7.8AI score0.01397EPSS
Exploits0References2
CVE
CVE
added 2017/11/20 3:0 p.m.59 views

CVE-2017-11401

The CVE-2017-11401 issue affects Belden Hirschmann Tofino Xenon Security Appliance prior to 03.2.00. The ModBus DPI filter mishandles the mbap.length field in ModBus packets, allowing crafted/malformed packets to bypass function-code filtering and reach protected assets. This is a network‑level b...

9.8CVSS7.8AI score0.01397EPSS
Exploits0References2Affected Software1
0day.today
0day.today
added 2017/09/13 12:0 a.m.60 views

ZScada Modbus Buffer 2.0 - Stack-Based Buffer Overflow Exploit

Exploit for windows platform in category remote exploits require 'msf/core' class MetasploitModule 'ZScada Net Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in Z-Scada Net 2.0. The vulnerability is triggered when parsing the response to a Modbus...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2017/09/13 12:0 a.m.34 views

ZScada Modbus Buffer 2.0 - Stack Buffer Overflow (Metasploit)

ZScada Modbus Buffer 2.0 - Stack Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'ZScada Net Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in Z-Scada Net 2.0. The vulnerability is triggered when parsing the response to a Modbus...

0.8AI score
Exploits0
Exploit DB
Exploit DB
added 2017/09/13 12:0 a.m.74 views

ZScada Modbus Buffer 2.0 - Stack Buffer Overflow (Metasploit)

require 'msf/core' class MetasploitModule 'ZScada Net Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in Z-Scada Net 2.0. The vulnerability is triggered when parsing the response to a Modbus packet. , 'Author' = 'james fitts' , 'License' = MSFLICENSE,...

7.4AI score
Exploits0
OpenVAS
OpenVAS
added 2017/09/05 12:0 a.m.30 views

Wireshark 'Modbus' Dissector DoS Vulnerability - Windows

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

7.5CVSS7.5AI score0.01252EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2017/09/05 12:0 a.m.27 views

Wireshark 'Modbus' Dissector DoS Vulnerability - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

7.5CVSS7.5AI score0.01252EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2017/09/01 3:18 p.m.29 views

CVE-2017-13764

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation...

7.5CVSS7.4AI score0.01252EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2017/09/01 12:0 a.m.34 views

Wireshark 2.4.x < 2.4.1 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.4.1 advisory. - In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop. This...

7.8CVSS7.3AI score0.02787EPSS
Exploits0References13
UbuntuCve
UbuntuCve
added 2017/08/30 9:29 a.m.23 views

CVE-2017-13764

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation...

7.5CVSS7.1AI score0.01252EPSS
Exploits0References4
NVD
NVD
added 2017/08/30 9:29 a.m.19 views

CVE-2017-13764

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation...

7.5CVSS7.3AI score0.01252EPSS
Exploits0References5
Prion
Prion
added 2017/08/30 9:29 a.m.9 views

Null pointer dereference

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation...

5CVSS7.3AI score0.01252EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2017/08/30 9:29 a.m.2 views

UBUNTU-CVE-2017-13764

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation...

7.5CVSS7.1AI score0.01252EPSS
Exploits0References5
OSV
OSV
added 2017/08/30 9:29 a.m.2 views

DEBIAN-CVE-2017-13764

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation...

7.5CVSS7.8AI score0.01252EPSS
Exploits0References1
OSV
OSV
added 2017/08/30 9:29 a.m.27 views

CVE-2017-13764

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation...

7.5CVSS6.5AI score
Exploits0References5
Rows per page
Query Builder