PT-2021-15411

Name of the Vulnerable Software and Affected Versions Gallagher Command Centre versions prior to 8.40.1888 MR3 Gallagher Command Centre versions prior to 8.30.1359 MR3 Gallagher Command Centre versions prior to 8.20.1259 MR5 Gallagher Command Centre versions prior to 8.10.1284 MR7 Gallagher Comma...

Advantech WebAccess/SCADA OPCUA Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess/SCADA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the OPCUA device driver. The issue results from the lack of proper validation ...

CVE-2019-19802

In Gallagher Command Centre Server v8.10 prior to v8.10.1134MR4, v8.00 prior to v8.00.1161MR5, v7.90 prior to v7.90.991MR5, v7.80 prior to v7.80.960MR2 and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without...

Privilege escalation

In Gallagher Command Centre Server v8.10 prior to v8.10.1134MR4, v8.00 prior to v8.00.1161MR5, v7.90 prior to v7.90.991MR5, v7.80 prior to v7.80.960MR2 and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without...

CVE-2019-19802

The CVE covers Gallagher Command Centre Server: affected versions are v8.10 before 8.10.1134 (MR4), v8.00 before 8.00.1161 (MR5), v7.90 before 7.90.991 (MR5), v7.80 before 7.80.960 (MR2), and v7.70 or earlier. An authenticated user connecting to OPC UA can view all data that would be replicated i...

CVE-2019-19802

In Gallagher Command Centre Server v8.10 prior to v8.10.1134MR4, v8.00 prior to v8.00.1161MR5, v7.90 prior to v7.90.991MR5, v7.80 prior to v7.80.960MR2 and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without...

PT-2020-10243

Name of the Vulnerable Software and Affected Versions Gallagher Command Centre Server versions prior to 8.10.1134MR4 Gallagher Command Centre Server versions prior to 8.00.1161MR5 Gallagher Command Centre Server versions prior to 7.90.991MR5 Gallagher Command Centre Server versions prior to...

CVE-2019-19802: Missing Authorization

In Gallagher Command Centre Server v8.10 prior to v8.10.1134MR4, v8.00 prior to v8.00.1161MR5, v7.90 prior to v7.90.991MR5, v7.80 prior to v7.80.960MR2 and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without...

SUSE SLED15 / SLES15 Security Update : wireshark (SUSE-SU-2018:3282-1)

This update for wireshark fixes the following issues : Wireshark was updated to 2.4.10 bsc1111647. Following security issues were fixed : CVE-2018-18227: MS-WSP dissector crash wnpa-sec-2018-47 CVE-2018-12086: OpcUA dissector crash wnpa-sec-2018-50 Further bug fixes and updated protocol support...

WAGO PLC Detection Consolidation

Consolidation of WAGO PLC Controller detections. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2018:3590-1)

This update for wireshark fixes the following issues : Wireshark was updated to 2.4.10 bsc1111647. Following security issues were fixed : CVE-2018-18227: MS-WSP dissector crash wnpa-sec-2018-47 CVE-2018-12086: OpcUA dissector crash wnpa-sec-2018-50 Further bug fixes and updated protocol support...

Security update for wireshark (important)

This update for wireshark fixes the following issues: Wireshark was updated to 2.4.10 bsc1111647. Following security issues were fixed: - CVE-2018-18227: MS-WSP dissector crash wnpa-sec-2018-47 - CVE-2018-12086: OpcUA dissector crash wnpa-sec-2018-50 Further bug fixes and updated protocol support...

Wireshark 1.2.1 - OpcUa Dissector Unspecified Resource Exhaustion DoS

No description provided by source. source: http://www.securityfocus.com/bid/36408/info Wireshark is prone to multiple denial-of-service vulnerabilities. Exploiting these issues may allow attackers to crash the application and deny service to legitimate users. These issues affect Wireshark 0.99.6...

GLSA-200911-05 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200911-05 Wireshark: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Wireshark: Ryan Giobbi reported an integer overflow in wiretap/erf.c CVE-2009-3829. The vendor reported multiple unspecified...

Mandrake Security Advisory MDVSA-2009:270 (wireshark)

The remote host is missing an update to wireshark announced via advisory MDVSA-2009:270. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Wireshark OpcUa Dissector Denial of Service Vulnerability (Windows)

This host is installed with Wireshark and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodwiresharkopcuadosvulnwin.nasl 5148 2017-01-31 13:16:55Z teissa $ Wireshark OpcUa Dissector Denial of Service Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright...

Wireshark OpcUa Dissector Denial of Service Vulnerability - Windows

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

Wireshark OpcUa Dissector Denial of Service Vulnerability - Linux

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

Wireshark / Ethereal 0.9.2 to 1.0.9 Multiple Vulnerabilities

The installed version of Wireshark or Ethereal is affected by multiple issues : - The AFS dissector could crash. Bug 3564 - The infiniband dissector could crash on some platforms. CVE-2009-2563 - The OpcUa dissector could use excessive CPU and memory. Bug 3986 These vulnerabilities could result i...

CVE-2009-3241

Unspecified vulnerability in the OpcUa OPC UA dissector in Wireshark 0.99.6 through 1.0.8 and 1.2.0 through 1.2.1 allows remote attackers to cause a denial of service memory and CPU consumption via malformed OPCUA Service CallRequest packets...