3061 matches found
Buffer Overflow Vulnerability in NA400 PLC at Aptar Technology Co.
NA400 PLC is a high performance programmable controller from OPTOTECHNIK Co. A buffer overflow vulnerability exists in the NA400PLC from Aptar Technology Corporation, which can be exploited by an attacker to cause a system crash...
(0Day) Fatek Automation PLC WinProladder PWD File Parsing Integer Underflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation PLC WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
Design/Logic Flaw
The vulnerabilities can be exploited to cause the web visualization component of the PLC to stop and not respond, leading to genuine users losing remote visibility of the PLC state. If a user attempts to login to the PLC while this vulnerability is exploited, the PLC will show an error state and...
CVE-2020-24686 AC500 V2 webserver denial of service vulnerability
The vulnerabilities can be exploited to cause the web visualization component of the PLC to stop and not respond, leading to genuine users losing remote visibility of the PLC state. If a user attempts to login to the PLC while this vulnerability is exploited, the PLC will show an error state and...
CVE-2020-24686
CVE-2020-24686 affects ABB AC500 V2 with onboard Ethernet. The issue is a denial of service in the PLC’s web visualization component: when exploited, the component stops responding and genuine users lose remote visibility of PLC state. If a user logs in while the vulnerability is exploited, the P...
Memory Out-of-Bounds Access Vulnerability in GX Works2
GX Works2 is a PLC programming software. A memory out-of-bounds access vulnerability exists in GX Works2. An attacker could exploit this vulnerability to cause the program to crash...
Code Injection Vulnerability in GX Works2
GX Works2 is a PLC programming software. A code injection vulnerability exists in GX Works2. An attacker can exploit this vulnerability to gain server privileges...
Denial of Service Vulnerability in GX Works2 (CNVD-2021-16895)
GX Works2 is a PLC programming software. A memory out-of-bounds access vulnerability exists in GX Works2. An attacker could exploit this vulnerability to cause the program to crash...
CVE-2020-24685
An unauthenticated specially crafted packet sent by an attacker over the network will cause a denial-of-service DoS vulnerability. Vulnerability allows attacker to stop the PLC. After stopping ERR LED flashing red, physical access to the PLC is required in order to restart the application. This...
Design/Logic Flaw
An unauthenticated specially crafted packet sent by an attacker over the network will cause a denial-of-service DoS vulnerability. Vulnerability allows attacker to stop the PLC. After stopping ERR LED flashing red, physical access to the PLC is required in order to restart the application. This...
CVE-2020-24685
CVE-2020-24685 affects ABB AC500 V2 with onboard Ethernet versions 2.8.4 and earlier. An unauthenticated, specially crafted network packet can cause a denial-of-service by stopping the PLC; after stop, physical access is required to restart the application. Public documents describe the vulnerabi...
CVE-2020-24685 AC500 V2 unauthenticated crafter packet vulnerability
An unauthenticated specially crafted packet sent by an attacker over the network will cause a denial-of-service DoS vulnerability. Vulnerability allows attacker to stop the PLC. After stopping ERR LED flashing red, physical access to the PLC is required in order to restart the application. This...
ABB Asea Brown Boveri Ltd ABB AC500 V2 Security Breach
ABB Asea Brown Boveri Ltd ABB AC500 V2 is a PLC from ABB Asea Brown Boveri Ltd, Sweden.Suitable for simple control tasks and complex automation solutions. ABB AC500 V2 products with onboard Ethernet version 2.8.4 and prior versions contain a security vulnerability that can be exploited by an...
SIMATIC S7-PLCSM suffers from a denial of service vulnerability (CNVD-2021-05558)
SIMATIC S7-PLCSM is a PLC simulation software developed by Siemens. SIMATIC S7-PLCSM has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...
SIMATIC S7-PLCSM suffers from a Denial of Service Vulnerability
SIMATIC S7-PLCSM is a PLC simulation software developed by Siemens. SIMATIC S7-PLCSM has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...
Rockwell Automation RSLinx classic ethernet/IP server denial-of-service vulnerability
Summary A denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic 2.57.00.14 CPR 9 SR 3. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of malicious packets to trigger this...
Carnivore - Tool For Assessing On-Premises Microsoft Servers Authentication Such As ADFS, Skype, Exchange, And RDWeb
Carnivore is an assessment tool for Skype for Business, Exchange, ADFS, and RDWeb servers as well as some O365 functionality. Carnivore includes some new post-authentication Skype for Business functionality. Released as open source by NCC Group Plc - https://www.nccgroup.com/ Developed by Chris...
CVE-2020-12516
Older firmware versions FW1 up to FW10 of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack...