Lucene search
K

1659 matches found

Cvelist
Cvelist
added 2023/06/26 6:19 a.m.22 views

CVE-2023-1150 WAGO: Series 750-3x/-8x prone to MODBUS server DoS

Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets...

7.5CVSS7.7AI score0.00703EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/06/26 6:19 a.m.10 views

CVE-2023-1150 WAGO: Series 750-3x/-8x prone to MODBUS server DoS

Uncontrolled resource consumption in Series WAGO 750-3x/-8x products may allow an unauthenticated remote attacker to DoS the MODBUS server with specially crafted packets...

7.5CVSS7.1AI score0.00703EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/06/14 12:0 a.m.4 views

PT-2023-3836 · Wago · Wago 750-3X/-8X

Name of the Vulnerable Software and Affected Versions: WAGO 750-3x/-8x products affected versions not specified Description: The issue is related to uncontrolled resource consumption in the mentioned products, which may allow an unauthenticated remote attacker to cause a denial of service DoS of...

7.8CVSS6.9AI score0.00703EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2023/05/31 12:0 a.m.3 views

The vulnerability of the Modbus TCP protocol implementation in Schneider Electric Modicon programmable logic controllers allows a intruder to trigger a service failure.

The vulnerability of the Modbus TCP protocol implementation in Schneider Electric Modicon programmable logic controllers is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the service operation...

7.8CVSS7.2AI score0.00616EPSS
Exploits0References3Affected Software2
CNNVD
CNNVD
added 2023/05/28 12:0 a.m.4 views

wago 750-8xx 资源管理错误漏洞

WAGO wago 750-8xx is a series of programmable logic controllers from the German company WAGO WAGO. The devices are specifically designed for use in industrial environments where digital computing operates electronic systems. A resource management error vulnerability exists in the WAGO 750-3x/-8x...

7.5CVSS7.3AI score0.00703EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/05/16 12:0 a.m.22 views

Schneider Electric Modicon Improper Check for Unusual or Exceptional Conditions (CVE-2023-25619)

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

7.5CVSS7.1AI score0.00616EPSS
Exploits0References2
Talos Blog
Talos Blog
added 2023/05/10 3:44 p.m.22 views

Vulnerability Spotlight: Authentication bypass, use-after-free vulnerabilities found in a library for the µC/OS open-source operating system

Kelly Leuschner of Cisco Talos discovered these vulnerabilities. Cisco Talos recently discovered two vulnerabilities in a library for µC/OS, an open-source operating system developed by Micrium. µC/OS is an embedded operating system that supports TCP/IP, USB, CAN bus and Modbus. The two...

5CVSS6.5AI score0.01488EPSS
Exploits3
BDU FSTEC
BDU FSTEC
added 2023/04/20 12:0 a.m.4 views

The vulnerability of Rockwell Automation’s Modbus TCP Server AO lies in the lack of protection for service data, which allows attackers to disclose the protected information.

The vulnerability of Rockwell Automation’s Modbus TCP Server AOI lies in the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

5.3CVSS5.5AI score0.00849EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2023/04/19 8:15 a.m.3 views

CVE-2023-25619

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol...

7.5CVSS7.1AI score0.00616EPSS
Exploits0References1
NVD
NVD
added 2023/04/19 8:15 a.m.17 views

CVE-2023-25619

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol...

7.5CVSS7.5AI score0.00616EPSS
Exploits0References1
Prion
Prion
added 2023/04/19 8:15 a.m.24 views

Design/Logic Flaw

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol...

5CVSS7.5AI score0.00616EPSS
Exploits0References1Affected Software2
CVE
CVE
added 2023/04/19 7:53 a.m.68 views

CVE-2023-25619

CVE-2023-25619 concerns Schneider Electric Modicon Modbus TCP where a CWE-754 improper check for unusual or exceptional conditions could cause a denial of service of the controller. Affected product family is Schneider Electric Modicon components using Modbus TCP; root cause is improper validatio...

7.5CVSS7.5AI score0.00616EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/19 7:53 a.m.7 views

CVE-2023-25619

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol...

7.5CVSS7.5AI score0.00616EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/04/19 7:53 a.m.21 views

CVE-2023-25619

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating over the Modbus TCP protocol...

7.5CVSS7.7AI score0.00616EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/04/19 12:0 a.m.4 views

Schneider Electric Modbus Serial Driver 代码问题漏洞

The Schneider Electric Modbus Serial Driver is a serial driver from Schneider Electric France. A code issue vulnerability exists in Schneider Electric Modbus TCP that stems from an inability to properly check for exceptions or anomalies, which could result in a denial of service to the controller...

7.5CVSS7.4AI score0.00616EPSS
Exploits0References2
NVD
NVD
added 2023/04/14 3:15 a.m.26 views

CVE-2023-1285

Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" allows a remote unauthenticated attacker to cause a denial-of-service DoS condition in Ethernet communication by sending a large number of specially...

7.5CVSS7.6AI score0.00686EPSS
Exploits0References2
Prion
Prion
added 2023/04/14 3:15 a.m.18 views

Race condition

Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" allows a remote unauthenticated attacker to cause a denial-of-service DoS condition in Ethernet communication by sending a large number of specially...

2.6CVSS5.8AI score0.00686EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/04/14 2:17 a.m.6 views

CVE-2023-1285

Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" allows a remote unauthenticated attacker to cause a denial-of-service DoS condition in Ethernet communication by sending a large number of specially...

7.5CVSS7.6AI score0.00686EPSS
Exploits0References2
CVE
CVE
added 2023/04/14 2:17 a.m.46 views

CVE-2023-1285

CVE-2023-1285 describes a signal handler race condition in Mitsubishi Electric India GC-ENET-COM (GOC35 series) where units with serial numbers starting with 16 are vulnerable. An unauthenticated remote attacker can cause a DoS in Ethernet communications by sending a flood of specially crafted UD...

7.5CVSS5.8AI score0.00686EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/04/14 2:17 a.m.21 views

CVE-2023-1285

Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit are "16" allows a remote unauthenticated attacker to cause a denial-of-service DoS condition in Ethernet communication by sending a large number of specially...

7.5CVSS7.7AI score0.00686EPSS
Exploits0References2
Rows per page
Query Builder