3368 matches found
Critical Flaw in Rockwell Automation Devices Allows Unauthorized Access
A high-severity security bypass vulnerability has been disclosed in Rockwell Automation ControlLogix 1756 devices that could be exploited to execute common industrial protocol CIP programming and configuration commands. The flaw, which is assigned the CVE identifier CVE-2024-6242, carries a CVSS...
CVE-2024-38435
Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service...
CVE-2024-38434
Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass...
CVE-2024-38435 Unitronics Vision PLC - CWE-703: Improper Check or Handling of Exceptional Conditions
Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service...
CVE-2024-38435 Unitronics Vision PLC - CWE-703: Improper Check or Handling of Exceptional Conditions
Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service...
CVE-2024-38435
CVE-2024-38435 affects Unitronics Vision PLC. The issue is CWE-703: improper check or handling of exceptional conditions leading to denial of service. It is listed as exploitable remotely over the network, with availability impact, and no vendor-provided fix/version details are present in the con...
CVE-2024-38434 Unitronics Vision PLC - CWE-676: Use of Potentially Dangerous Function
Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass...
CVE-2024-38434
CVE-2024-38434 corresponds to CWE-676: Use of Potentially Dangerous Function, potentially bypassing security features. The IBM Engineering Systems Design Rhapsody bulletin lists affected products and versions (Rhapsody 9.0.2, 10.0, 10.0.1) with iFix updates (iFix004, iFix002, iFix003) as remediat...
CVE-2024-38434 Unitronics Vision PLC - CWE-676: Use of Potentially Dangerous Function
Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass...
CVE-2024-38435: Improper Check or Handling of Exceptional Conditions
Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service...
CVE-2024-38434: Use of Potentially Dangerous Function
Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass...
Denial of Service Vulnerability in Schneider PLC Emulator at Schneider Electric (China) Co.
Schneider Electric China Co., Ltd. is a globalized electrical company and a global expert in energy efficiency management and automation. A denial of service vulnerability exists in the Schneider PLC emulator of Schneider Electric China Limited, which can be exploited by attackers to cause a...
PT-2024-5268 · Unitronics · Unitronics Vision Plc
Name of the Vulnerable Software and Affected Versions: Unitronics Vision PLC affected versions not specified Description: The issue is related to improper check or handling of exceptional conditions, which may allow denial of service. An attacker, acting remotely, can exploit this to cause a...
PT-2024-5269
Name of the Vulnerable Software and Affected Versions Unitronics Vision PLC affected versions not specified Description The issue is related to the use of potentially dangerous functions, which may allow security feature bypass. An attacker, acting remotely, can exploit this issue to bypass...
CVE-2024-28751 ifm: Hardcoded telnet credentials in Smart PLC
An high privileged remote attacker can enable telnet access that accepts hardcoded credentials...
CVE-2024-28751 ifm: Hardcoded telnet credentials in Smart PLC
An high privileged remote attacker can enable telnet access that accepts hardcoded credentials...
CVE-2024-28750 ifm: Deleting function in Smart PLC allows command injections
A remote attacker with high privileges may use a deleting file function to inject OS commands...
CVE-2024-28750 ifm: Deleting function in Smart PLC allows command injections
A remote attacker with high privileges may use a deleting file function to inject OS commands...