Abb Fox515t Improper Input Validation

An Improper Input Validation issue was discovered in ABB FOX515T release 1.0. An improper input validation vulnerability has been identified, allowing a local attacker to provide a malicious parameter to the script that is not validated by the application, This could enable the attacker to retrie...

Siemens Simatic Unspecified Vulnerability

Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service defect-mode transition and service outage via crafted ICMP packets. File data ot500211.nasl...

Cisco Ios Use of Externally-Controlled Format String

Format String vulnerability in the Link Layer Discovery Protocol LLDP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition or execute arbitrary code with elevated privileges o...

Dell OT Asset Information

This plugin returns information for a Dell asset in an OT environment. File data ot500002.nasl...

Schneider-electric Modicon Cleartext Transmission of Sensitive Information

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules all firmware versions, which could cause information disclosure when using the FTP protocol. File data ot500240.nasl...

Siemens Simatic Improper Input Validation

Specially crafted PROFINET DCP broadcast packets could cause a Denial-of-Service condition of affected products on a local Ethernet segment Layer 2. Human interaction is required to recover the systems. PROFIBUS interfaces are not affected. File data ot500277.nasl...

Rockwellautomation Rslinx Uncontrolled Resource Consumption

Rockwell Automation RSLinx Classic Versions 4.00.01 and prior. A remote, unauthenticated threat actor may intentionally send specially crafted Ethernet/IP packets to Port 44818, causing the software application to stop responding and crash. The user must restart the software to regain...

Schneider-electric Somachine Improper Input Validation

A Environment CWE-2 vulnerability exists in SoMachine Basic, all versions, and Modicon M221all references, all versions prior to firmware V1.10.0.0 which could cause remote launch of SoMachine Basic when sending crafted ethernet message. File data ot500329.nasl...

Schneider-electric Modicon Improper Restriction of Operations within the Bounds of a Memory Buffer

The Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules allow remote authenticated users to cause a denial of service module crash via crafted FTP traffic, as demonstrated by the FileZilla FTP client. File data ot500046.nasl...

Schneider-electric Modicon Improper Handling of Exceptional Conditions

A CWE-248: Uncaught Exception vulnerability exists Modicon M580 firmware version prior to V2.90, Modicon M340 firmware version prior to V3.10, Modicon Premium all versions, and Modicon Quantum all versions, which could cause a possible denial of service when reading specific coils and registers i...

Siemens Sicam Unspecified Vulnerability

An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing the database. File data ot500097.nasl...

Enea Ose Exposure of Sensitive Information to an Unauthorized Actor

The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier performs network-beacon broadcasts, which allows remote attackers to obtain potentially sensitive informati...

Schneider-electric Modicon Improper Check for Unusual or Exceptional Conditions

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of Service when writing invalid memory blocks to the controller over Modbus. File data ot500124.nasl...

Rockwellautomation Controllogix Exposure of Sensitive Information to an Unauthorized Actor

The web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to obtain "internal web page information" and "internal information about the module" via unspecified vectors. NOTE: this may overlap CVE-2002-1603. File data ot500031.nasl...

Rockwellautomation Rslinx Improper Input Validation

LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 allows remote attackers to cause a denial of service service outage via a zero-byte UDP packet that is not properly handled by Logger.dll. File data ot500259.n...

Rockwellautomation Compactlogix Uncontrolled Resource Consumption

A Resource Exhaustion issue was discovered in Rockwell Automation ControlLogix 5580 controllers V28.011, V28.012, and V28.013; ControlLogix 5580 controllers V29.011; CompactLogix 5380 controllers V28.011; and CompactLogix 5380 controllers V29.011. This vulnerability may allow an attacker to cause...

Yokogawa B\/m Improper Access Control

License Manager Service of YOKOGAWA products CENTUM VP R5.01.00 - R6.06.00, CENTUM VP Entry Class R5.01.00 - R6.06.00, ProSafe-RS R3.01.00 - R4.04.00, PRM R4.01.00 - R4.02.00, B/M9000 VPR7.01.01 - R8.02.03 allows remote attackers to bypass access restriction to send malicious files to the PC wher...

Enea Ose Improper Control of Generation of Code ('Code Injection')

The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to upload files and consequently execute arbitrary code via unspecified vectors. File data...

Schneider-electric Micom Insufficient Session Expiration

A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x P540 range excluded with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 DNP3oE if an older...

Abb Pm554-tp-eth Uncontrolled Resource Consumption

ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets. File data ot500200.nasl...