CVE-2020-18758

An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to execute arbitrary code...

CVE-2020-18758

The CVE-2020-18758 entry concerns Dut Computer Control Engineering Co. MAC1100 PLC. The connected records confirm a code execution vulnerability exists in the MAC1100 PLC, enabling an attacker to execute arbitrary code. The available details identify the affected product (MAC1100 PLC) and the out...

CVE-2020-18757

The CVE-2020-18757 entry concerns Dut Computer Control Engineering Co.’s MAC1100 PLC. Affected component: MAC1100 PLC; vulnerability type: denial of service; root cause described as a crafted packet that allows an attacker to cause a persistent DOS condition. Across connected sources (Red Hat adv...

CVE-2020-18757

An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to cause persistent denial of service DOS via a crafted packet...

CVE-2020-18756

An arbitrary memory access vulnerability in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to read the contents of any variable area...

CVE-2020-18756

The CVE-2020-18756 entry describes an arbitrary memory access vulnerability in the EPA protocol of Dut Computer Control Engineering Co.’s MAC1100 PLC. The root cause is a memory access flaw that allows an attacker to read the contents of any variable area within the device. Impact is read-access ...

CVE-2020-18753

The CVE-2020-18753 entry concerns Dut Computer Control Engineering Co.’s MAC1100 PLC. The connected sources consistently describe an elevation of privilege/access issue in the MAC1100 that can be triggered by processing a crafted packet. No specific vulnerable versions, root-cause technical detai...

CVE-2020-18754

An information disclosure vulnerability exists within Dut Computer Control Engineering Co.'s PLC MAC1100...

CVE-2020-18753

An issue in Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to gain access to the system and escalate privileges via a crafted packet...

CVE-2020-18754

The CVE-2020-18754 entry concerns Dut Computer Control Engineering Co.’s PLC MAC1100. Connected sources confirm an information disclosure vulnerability in the MAC1100 PLC, enabling remote access to control code or sensitive information. CNVD/CNNVD describe the impact as the ability for an attacke...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Spectrum LSF Application Center

Summary There are multiple vulnerabilities in IBM®Runtime Environment Java™Version 8 used by IBM Spectrum LSF Application Center. IBM Spectrum LSF Application Center has addressed the applicable CVEs. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

PT-2021-10237 · Dut Computer Control Engineering Co. · Plc Mac1100

Name of the Vulnerable Software and Affected Versions: Dut Computer Control Engineering Co.'s PLC MAC1100 affected versions not specified Description: An information disclosure issue exists within the system, potentially allowing unauthorized access to sensitive information. Recommendations: At t...

MAC1100 PLC 缓冲区错误漏洞

The MAC1100 PLC is an industrial control product PLC. A security vulnerability exists in the EPA protocol of the MAC1100 PLC that can be exploited by an attacker to read the contents of arbitrary memory...

Siemens SIMATIC S7-1200 Missing Authentication Vulnerability

Siemens SIMATIC S7-1200 is an S7-1200 series PLC programmable logic controller from Siemens, Germany. The Siemens SIMATIC S7-1200 suffers from a security vulnerability that stems from the device's inability to authenticate itself based on a configured password. An attacker can exploit the...

Siemens SIMATIC S7-1500 CPU and SIMATIC S7-1500 Incorrect Authorization Vulnerability

The Siemens SIMATIC S7-1500 CPU and SIMATIC S7-1500 are both products of Siemens, Germany.The SIMATIC S7-1500 CPU is a CPU central processing unit module.The SIMATIC S7-1500 is a programmable logic controller. A security vulnerability exists in the Siemens SIMATIC S7-1500 CPU and SIMATIC S7-1500...

CVE-2020-28397

A vulnerability has been identified in SIMATIC Drive Controller family All versions V2 V2.5 V2.5 V21.9, TIM 1531 IRC incl. SIPLUS NET variants Version V2.1. Due to an incorrect authorization check in the affected component, an attacker could extract information about access protected PLC program...

CVE-2020-28397

A vulnerability has been identified in SIMATIC Drive Controller family All versions V2 V2.5 V2.5 V21.9, TIM 1531 IRC incl. SIPLUS NET variants Version V2.1. Due to an incorrect authorization check in the affected component, an attacker could extract information about access protected PLC program...

Authorization

A vulnerability has been identified in SIMATIC Drive Controller family All versions V2 V2.5 V2.5 V21.9, TIM 1531 IRC incl. SIPLUS NET variants Version V2.1. Due to an incorrect authorization check in the affected component, an attacker could extract information about access protected PLC program...

Authentication flaw

A vulnerability has been identified in SIMATIC S7-1200 CPU family incl. SIPLUS variants V4.5.0. Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication an...

CVE-2021-37172

The CVE-2021-37172 vulnerability affects the SIMATIC S7-1200 CPU family (including SIPLUS variants) version 4.5.0. It arises from improper authentication when devices are provisioned with TIA Portal V13, allowing an attacker to bypass authentication and download arbitrary programs to the PLC; the...