CVE-2020-14514

All trailer Power Line Communications are affected. PLC bus traffic can be sniffed reliably via an active antenna up to 6 feet away. Further distances are also possible, subject to environmental conditions and receiver improvements...

CVE-2020-14514

CVE-2020-14514 affects all trailer Power Line Communications PLC buses. The issue: PLC bus traffic can be sniffed with an active antenna up to 6 feet away (potentially farther depending on environment), exposing confidential data from trailer ECUs. The CVSS v3.1 base score is 4.3 (Medium) with AV...

CVE-2020-14514 Trailer Power Line Communications vulnerability

All trailer Power Line Communications are affected. PLC bus traffic can be sniffed reliably via an active antenna up to 6 feet away. Further distances are also possible, subject to environmental conditions and receiver improvements...

PT-2020-14052

Name of the Vulnerable Software and Affected Versions Trailer Power Line Communications affected versions not specified Description The issue allows PLC bus traffic to be sniffed reliably via an active antenna up to 6 feet away, with further distances possible subject to environmental conditions...

Denial of Service Vulnerability in Mitsubishi Electric Corporation GX Works2 (CNVD-2020-49073)

GX Work2 is a PLC programming software developed by Mitsubishi Electric Automation Co., Ltd. for PLC design, debugging, maintenance and other work, which is widely used in electric power, machinery manufacturing, iron and steel, petroleum, chemical and other industrial control fields. A denial of...

Denial of Service Vulnerability in Mitsubishi Electric Corporation GX Works2 (CNVD-2020-49072 )

GX Work2 is a PLC programming software developed by Mitsubishi Electric Automation Co., Ltd. for PLC design, debugging, maintenance and other work, which is widely used in electric power, machinery manufacturing, iron and steel, petroleum, chemical and other industrial control fields. A denial of...

Denial of Service Vulnerability in Mitsubishi Electric Corporation GX Works2 (CNVD-2020-49074 )

GX Work2 is a PLC programming software developed by Mitsubishi Electric Automation Co., Ltd. for PLC design, debugging, maintenance and other work, which is widely used in electric power, machinery manufacturing, iron and steel, petroleum, chemical and other industrial control fields. A denial of...

Siemens LOGO! Web Server Code Execution Vulnerability

Summary An exploitable code execution vulnerability exists in the Web Server functionality of Siemens LOGO! 1.82.02, 12/24RCE Version 0BA and 230RCE Version 0BA. A specially crafted HTTP request can cause memory corruption resulting in a code execution. An attacker can send an unauthenticated...

CVE-2020-10628

ControlEdge PLC R130.2, R140, R150, and R151 and RTU R101, R110, R140, R150, and R151 exposes unencrypted passwords on the network...

CVE-2020-10624

ControlEdge PLC R130.2, R140, R150, and R151 and RTU R101, R110, R140, R150, and R151 exposes a session token on the network...

Design/Logic Flaw

ControlEdge PLC R130.2, R140, R150, and R151 and RTU R101, R110, R140, R150, and R151 exposes unencrypted passwords on the network...

Design/Logic Flaw

ControlEdge PLC R130.2, R140, R150, and R151 and RTU R101, R110, R140, R150, and R151 exposes a session token on the network...

CVE-2020-10624

CVE-2020-10624 affects Honeywell ControlEdge PLC (R130.2, R140, R150, R151) and ControlEdge RTU (R101, R110, R140, R150, R151). The vulnerability leads to a session token being exposed on the network due to cleartext transmission of sensitive information. NVD CVSS data indicates an impact: confid...

CVE-2020-10624

ControlEdge PLC R130.2, R140, R150, and R151 and RTU R101, R110, R140, R150, and R151 exposes a session token on the network...

CVE-2020-10628

CVE-2020-10628 affects Honeywell ControlEdge PLC (R130.2, R140, R150, R151) and ControlEdge RTU (R101, R110, R140, R150, R151). The vulnerability involves cleartext transmission of passwords on the network, exposing credentials and session tokens. Root cause, per Red Hat and industry advisories, ...

CVE-2020-10628

ControlEdge PLC R130.2, R140, R150, and R151 and RTU R101, R110, R140, R150, and R151 exposes unencrypted passwords on the network...

CVE-2020-10628: Cleartext Transmission of Sensitive Information

ControlEdge PLC R130.2, R140, R150, and R151 and RTU R101, R110, R140, R150, and R151 exposes unencrypted passwords on the network...

CVE-2020-10624: Cleartext Transmission of Sensitive Information

ControlEdge PLC R130.2, R140, R150, and R151 and RTU R101, R110, R140, R150, and R151 exposes a session token on the network...

PT-2020-12255

Name of the Vulnerable Software and Affected Versions ControlEdge PLC versions R130.2, R140, R150, and R151 ControlEdge RTU versions R101, R110, R140, R150, and R151 Description The issue concerns the exposure of unencrypted passwords on the network. This occurs due to a problem where passwords a...

PT-2020-12252

Name of the Vulnerable Software and Affected Versions ControlEdge PLC versions R130.2, R140, R150, and R151 ControlEdge RTU versions R101, R110, R140, R150, and R151 Description The issue concerns the exposure of a session token on the network. This affects ControlEdge PLC and RTU devices,...