CVE-2021-27477

CVE-2021-27477 affects JTEKT TOYOPUC PLC family (PC10G-CPU, 2PORT-EFR, Plus CPU/EX/EX2, EFR/EFR2, 2P-EFR, PC10P-DP/DP-IO, Nano series, PC10PE/16/16P, PC10E, FL/ET-T-V2H, PC10B/PC10B-P, Nano CPU, PC10P, PC10GE and Plus variants). Root cause: improper restriction of operations within the bounds of ...

PT-2021-17465 · Jtekt · Toyopuc Plc

Name of the Vulnerable Software and Affected Versions: JTEKT Corporation TOYOPUC PLC versions PC10G-CPU, 2PORT-EFR, Plus CPU, Plus EX, Plus EX2, Plus EFR, Plus EFR2, Plus 2P-EFR, PC10P-DP, PC10P-DP-IO, Plus BUS-EX, Nano 10GX, Nano 2ET, PC10PE, PC10PE-16/16P, PC10E, FL/ET-T-V2H, PC10B, PC10B-P, Na...

JTEKT TOYOPUC PLC

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low attack complexity Vendor: JTEKT Corporation Equipment: TOYOPUC PLC Vulnerability : Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of this...

Authentication flaw

Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packets to cause a denial of...

CVE-2021-33541

The CVE-2021-33541 entry affects Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 across all versions/variants. The issue is a Denial-of-Service vulnerability caused by authenticationless communication protocols and device access, allowing remote attackers to send crafted IP packets to ...

CVE-2021-33541 Phoenix Contact: ILC1x Industrial controllers affected by Denial-of-Service vulnerability

Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packets to cause a denial of...

FATEK Automation WinProladder

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: FATEK Automation Equipment: WinProladder Vulnerabilities: Out-of-bounds Read, Out-of-bounds Write, Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of these...

CLICK PLC CPU Modules 授权问题漏洞

CLICK PLC CPU Modules are Automation Direct's network devices A single CLICK CPU Module can be connected to up to 8 I/O modules to expand the amount of system I/O and meet the needs of a specific application. A security vulnerability exists in Automation Direct CLICK PLC CPU Modules that stems fr...

Automation Direct CLICK PLC CPU Modules

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Automation Direct Equipment: CLICK PLC CPU modules Vulnerabilities: Authentication Bypass Using an Alternate Path or Channel, Cleartext Transmission of Sensitive Information, Unprotected Storage of...

CLICK PLC CPU Modules 安全漏洞

CLICK PLC CPU Modules are Automation Direct's network devices A single CLICK CPU Module can be connected to up to eight I/O modules to expand the amount of system I/O and meet the needs of a specific application. A security vulnerability exists in Automation Direct CLICK PLC CPU Modules that allo...

CLICK PLC CPU Modules 安全漏洞

CLICK PLC CPU Modules are Automation Direct's network devices A single CLICK CPU Module can be connected to up to eight I/O modules to expand the amount of system I/O and meet the needs of a specific application. Automation Direct CLICK PLC CPU Modules have a security vulnerability that allows an...

10 Critical Flaws Found in CODESYS Industrial Automation Software

Cybersecurity researchers on Thursday disclosed as many as ten critical vulnerabilities impacting CODESYS automation software that could be exploited to achieve remote code execution on programmable logic controllers PLCs. "To exploit the vulnerabilities, an attacker does not need a username or...

3S-Smart Software Solutions CODESYS V2 Web-Server Access Control Error Vulnerability

3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. An access control error vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker with the...

Command Execution Vulnerability in Rockwell Automation/Allen-Bradley 1756-EN2T/D PLCs

The Rockwell Automation/Allen-Bradley 1756-EN2T/D PLC is a programmable controller. A command execution vulnerability exists in the Rockwell Automation/Allen-Bradley 1756-EN2T/D PLC. An attacker could exploit this vulnerability to gain control of a web server...

OpenPLC 3 - Remote Code Execution (Authenticated)

Exploit Title: OpenPLC 3 - Remote Code Execution Authenticated Date: 25/04/2021 Exploit Author: Fellipe Oliveira Vendor Homepage: https://www.openplcproject.com/ Software Link: https://github.com/thiagoralves/OpenPLCv3 Version: OpenPLC v3 Tested on: Ubuntu 16.04,Debian 9,Debian 10 Buster...

Binary Vulnerability in Haiwell PLC OPC Server

Founded in 2005, Xiamen Haiwei Technology Co., Ltd. is a national high-tech enterprise integrating independent research and development, production, sales and service. A binary vulnerability exists in the Haiwell PLC OPC server, which can be exploited by attackers to cause a denial of service...

Industrial Control Device Vulnerability in NA400 PLC at Aptar Technology Co.

NA400 PLC is a high performance programmable controller from OPTOTECHNIK Co. A vulnerability exists in the NA400PLC of Aptar Technology Corporation for industrial control devices, which can be exploited by an attacker to modify a user's password...

Binary Vulnerability in Kinco Builder

Kinco Builder is a PLC programming software for KS101M-04DX K209M-56DT HP070-33DT devices. A binary vulnerability exists in Kinco Builder, which can be exploited by attackers to cause a denial of service...

JTEKT TOYOPUC-Plus 安全漏洞

JTEKT TOYOPUC-Plus is a PLC from JTEKT Japan. A security vulnerability exists in several TOYOPUC products. The vulnerability stems from the inability to establish Ethernet communication with other devices when the product's Ethernet communication is in the open state, depending on the settings of...

FATEK Automation WinProladder Integer Overflow Vulnerability

The official version of WinProLadder is a pretty good and useful PLC programming tool. FATEK Automation WinProladder integer overflow vulnerability can be exploited by attackers to cause arbitrary code execution...