Siemens SCALANCE Series 资源管理错误漏洞

The SCALANCE X-204RNA Industrial Ethernet Access Point enables non-PRP end devices to connect to separate parallel networks where required. An uncontrolled resource consumption vulnerability exists in Siemens SCALANCE X-200RNA Switch Devices, which can be exploited by an attacker to cause a denia...

Siemens SIMATIC Drive Controller 安全漏洞

SIMATIC Drive Controllers for the automation of production machines combine the functionality of SIMATIC S7-1500 CPUs with that of SINAMICS S120 drive controls.SIMATIC ET 200SP Open Controller is the PC-based version of the SIMATIC S7-1500 controller. Includes optional visualization features and...

Siemens SIMATIC Drive Controller 输入验证错误漏洞

SIMATIC Drive Controllers for the automation of production machines combine the functionality of SIMATIC S7-1500 CPUs with that of SINAMICS S120 drive controls.SIMATIC ET 200SP Open Controller is the PC-based version of the SIMATIC S7-1500 controller. Includes optional visualization features and...

Siemens SIMATIC Drive Controller 输入验证错误漏洞

SIMATIC Drive Controllers for the automation of production machines combine the functionality of SIMATIC S7-1500 CPUs with that of SINAMICS S120 drive controls.SIMATIC ET 200SP Open Controller is the PC-based version of the SIMATIC S7-1500 controller. Includes optional visualization features and...

Siemens SCALANCE Series 资源管理错误漏洞

The SCALANCE X-204RNA Industrial Ethernet Access Point enables non-PRP end devices to connect to separate parallel networks where required. An uncontrolled resource consumption vulnerability exists in Siemens SCALANCE X-200RNA Switch Devices, which can be exploited by an attacker to cause a denia...

CVE-2021-40365

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device...

CVE-2021-44695

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device...

CVE-2021-44694

The CVE-2021-44694 issue affects Siemens industrial products (notably the SIMATIC Drive Controller family, ET 200SP Open Controller CPU 1515SP PC2, S7-1200, S7-1500 families, and related SIMATIC software) where devices fail to properly process certain specially crafted packets sent to port 102/tc...

CVE-2021-40365

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device...

CVE-2022-46352

A vulnerability has been identified in SCALANCE X204RNA HSR All versions V3.2.7, SCALANCE X204RNA PRP All versions V3.2.7, SCALANCE X204RNA EEC HSR All versions V3.2.7, SCALANCE X204RNA EEC PRP All versions V3.2.7, SCALANCE X204RNA EEC PRP/HSR All versions V3.2.7. Specially crafted PROFINET DCP...

CVE-2021-44693

CVE-2021-44693 affects Siemens industrial controllers where certain specially crafted packets to TCP port 102 are not processed correctly, causing a denial-of-service. Affected products include SIMATIC Drive Controller family, SIMATIC ET 200SP Open Controller CPU 1515SP, SIMATIC S7-1200, S7-1500 ...

CVE-2021-40365

CVE-2021-40365 affects Siemens SIMATIC Drive Controller family and related SIMATIC S7 variants. Affected devices fail to process certain specially crafted packets sent to port 102/tcp, enabling a remote attacker to cause a denial-of-service. Affected products include SIMATIC Drive Controller fami...

CVE-2022-20686

Multiple vulnerabilities in the Link Layer Discovery Protocol LLDP functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device and cause the LLDP service to restart. These vulnerabilities a...

Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2022-2792)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-36520 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.265 Description: The issue is related to bugs in the handling of oversize packets when napi frags are enabled. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-36451 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.224 Description: The issue is related to bugs in the handling of oversize packets when napi frags are enabled. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2025-49468

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc5-wt-ath-656295-gef907406320c-dirty 6 Description The Linux kernel contains a flaw within the ath11k module related to monitor mode bringup. When an interface is activated in monitor mode, a NULL pointer...

PT-2022-36256 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.78 Description: The issue is related to bugs in the handling of oversize packets when napi frags are enabled. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

Debian dla-3231 : dlt-daemon - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3231 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3231-1 [email protected]...

DEBIAN-CVE-2022-3643

Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an unwritten? assumption in the rest of the Linux network stack that packet...