EUVD-2018-20475

Malware in sbrugna...

EUVD-2019-4979

Malware in sbrugna...

CVE-2019-13524

GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versionsEnd of Life may allow an attacker sending specially manipulated packets to cause the module state to change to halt-mode, resulting in a denial-of-service...

The vulnerability of embedded images of PACsystems programmable logic controllers allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of embedded images of PACsystems programmable logic controllers is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data, compromise its integrity, and even cause...

The vulnerability of the implementation of the SRTP protocol in microprogrammed software for programmable logic controllers PACsystems allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SRTP protocol implementation in PACsystems microprogrammed logic controllers involves the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of microprogrammed software in PACsystems programmable logic controllers, related to insufficient verification of data authenticity, allows a intruder to execute arbitrary code.

The vulnerability of microprogrammed programmable logic controllers from PACsystems is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary code using a specially crafted file written in...

The vulnerability of microprogrammed software for PACsystems programmable logic controllers, related to data transmission between the browser and the PLC using the HTTP protocol, allows a intruder to gain unauthorized access to protected information.

The vulnerability of PACsystems programmable logic controllers’ microprogramming software is related to the transmission of data between the browser and the PLC using the HTTP protocol. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2022-3171

Name of the Vulnerable Software and Affected Versions PACsystems affected versions not specified Description The issue is related to the implementation of the SRTP protocol in the PACsystems programmable logic controllers' firmware, which involves the transmission of data in plain text. This coul...

PT-2022-3173

Name of the Vulnerable Software and Affected Versions PACsystems affected versions not specified Description The issue is related to the transmission of data between the browser and the PACsystems programmable logic controller PLC using the HTTP protocol. Exploitation of this issue could allow a...

PT-2022-3169

Name of the Vulnerable Software and Affected Versions PACsystems affected versions not specified Description The issue is related to insufficient data authentication in the embedded software images of PACsystems programmable logic controllers. This can be exploited by a remote attacker to access...

PT-2022-3170

Name of the Vulnerable Software and Affected Versions PACsystems affected versions not specified Description The issue is related to insufficient data authentication in the PACsystems programmable logic controller software. It allows a remote attacker to execute arbitrary code using a specially...

GE PACSystems CPE305/310, CPE330, CPE400, RSTi-EP CPE 100, CPU320/CRU320, RXi Improper Input Validation (CVE-2018-8867)

In GE PACSystems RX3i CPE305/310 version 9.20 and prior, RX3i CPE330 version 9.21 and prior, RX3i CPE 400 version 9.30 and prior, PACSystems RSTi-EP CPE 100 all versions, and PACSystems CPU320/CRU320 RXi all versions, the device does not properly validate input, which could allow a remote attacke...

GE PACSystems RX3i Improper Input Validation (CVE-2019-13524)

GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versionsEnd of Life may allow an attacker sending specially manipulated packets to cause the module state to change to halt-mode, resulting in a denial-of-service...

Denial of Service Vulnerability in GE PACSystems Rx3i

PACSystems Rx3i is a programmable automation controller from General Electric. A denial of service vulnerability exists in GE PACSystems Rx3i, which can be exploited by an attacker to cause the device to crash...

CVE-2019-13524

GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versionsEnd of Life may allow an attacker sending specially manipulated packets to cause the module state to change to halt-mode, resulting in a denial-of-service...

CVE-2019-13524

GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versionsEnd of Life may allow an attacker sending specially manipulated packets to cause the module state to change to halt-mode, resulting in a denial-of-service...

Design/Logic Flaw

GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versionsEnd of Life may allow an attacker sending specially manipulated packets to cause the module state to change to halt-mode, resulting in a denial-of-service...

CVE-2019-13524

GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versionsEnd of Life may allow an attacker sending specially manipulated packets to cause the module state to change to halt-mode, resulting in a denial-of-service...

CVE-2019-13524

CVE-2019-13524 affects GE PACSystems RX3i: CPE100/115 (pre-R9.85), CPE302/305/310/330/400/410 (pre-R9.90), and CRU/320 (End of Life) with improper input validation. Sending specially manipulated packets can cause the module state to change to halt-mode, producing a denial-of-service condition. Re...

PT-2020-9404

Name of the Vulnerable Software and Affected Versions: GE PACSystems RX3i CPE100/115 versions prior to R9.85 GE PACSystems RX3i CPE302/305/310/330/400/410 versions prior to R9.90 GE PACSystems RX3i CRU/320 all versions Description: The issue allows an attacker to send specially manipulated packet...