1641 matches found
CVE-2021-29660
A Cross-Site Request Forgery CSRF vulnerability in en/cfgsetpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 allows attackers to reset the administrative password by inducing the Administrator user to browse a URL controlled by an attacker...
CVE-2021-29661
Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diagvalues.html Stored XSS via the ITEMLISTVALUESITEMID parameter, resulting in JavaScript payload injection into the trace file. This payload will then be triggered every time an authenticated user browses the page containing it...
CVE-2021-29661
CVE-2021-29661 affects Softing AG OPC Toolbox prior to or including 4.10.1.13035. The issue is a Stored XSS vulnerability in the page /en/diag_values.html, exploitable via the ITEMLISTVALUES##ITEMID parameter which injects JavaScript into the trace file. The payload is triggered whenever an authe...
CVE-2021-29660
CVE-2021-29660 concerns a CSRF vulnerability in Softing AG OPC Toolbox (en/cfg_setpwd.html) up to version 4.10.1.13035. An attacker can induce an Administrator to browse a URL under attacker control, enabling a reset of the administrative password. Documents consistently describe the flaw as CSRF...
CVE-2021-29660
A Cross-Site Request Forgery CSRF vulnerability in en/cfgsetpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 allows attackers to reset the administrative password by inducing the Administrator user to browse a URL controlled by an attacker...
Softing AG OPC Toolbox 跨站请求伪造漏洞
Softing AG OPC Toolbox is an application from Softing Germany.OPC Toolbox is a series of high-end toolboxes for quick and easy development of OPC clients and servers for Windows, Windows CE, Linux and more. Softing AG OPC Toolbox through 4.10.1.13035 A cross-site request forgery vulnerability can...
CVE-2021-29661: Improper Neutralization of Input During Web Page Generation
Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diagvalues.html Stored XSS via the ITEMLISTVALUESITEMID parameter, resulting in JavaScript payload injection into the trace file. This payload will then be triggered every time an authenticated user browses the page containing it...
PT-2021-18389
Name of the Vulnerable Software and Affected Versions Softing AG OPC Toolbox versions prior to 4.10.1.13036 Description A Cross-Site Request Forgery issue allows attackers to reset the administrative password by inducing the Administrator user to browse a URL controlled by an attacker...
Softing AG OPC Toolbox 跨站脚本漏洞
Softing AG OPC Toolbox is an application from Softing, Germany.OPC Toolbox is a series of high-end toolboxes for quick and easy development of OPC clients and servers for Windows, Windows CE, Linux and many more platforms. Softing AG OPC Toolbox through 4.10.1.13035 A cross-site scripting...
CVE-2021-29660: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF vulnerability in en/cfgsetpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 allows attackers to reset the administrative password by inducing the Administrator user to browse a URL controlled by an attacker...
PT-2021-18390
Name of the Vulnerable Software and Affected Versions Softing AG OPC Toolbox versions prior to 4.10.1.13036 Description The issue allows for Stored XSS via the ITEMLISTVALUESITEMID parameter in the "/en/diag values.html" API endpoint, resulting in JavaScript payload injection into the trace file...
PT-2021-6748 · Unified Automation · Unified Automation .Net Based Opc Ua Client/Server Sdk Bundle
Name of the Vulnerable Software and Affected Versions: Unified Automation .NET based OPC UA Client/Server SDK Bundle versions V3.0.7 and prior Description: The issue is related to an uncontrolled recursion that may allow an attacker to trigger a stack overflow. It is also associated with...
PT-2021-6746
Name of the Vulnerable Software and Affected Versions OPC Foundation UA .NET Standard versions prior to 1.4.365.48 OPC UA .NET Legacy Description The issue is related to an uncontrolled recursion in the OPC UA .NET Standard and OPC UA .NET Legacy implementations, which may allow an attacker to...
Privilege Escalation
OPC UA Clients and Servers built with the OPC UA .NET Standard stack is vulnerable to privilege escalation. The vulnerability exists because that it allows a rogue application to establish a secure connection using invalid certificates...
CVE-2020-29457
A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection...
CVE-2020-29457
A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection...
Privilege escalation
A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection...
CVE-2020-29457
A Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 could allow a rogue application to establish a secure connection...
CVE-2020-29457
CVE-2020-29457 reports a Privilege Elevation vulnerability in OPC UA .NET Standard Stack 1.4.363.107 that could allow a rogue application to establish a secure connection. Connected sources describe improper certificate validation, enabling connections using invalid certificates, affecting OPC UA...
