527 matches found
Design/Logic Flaw
A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels all versions of - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, XBTGT, HMIGXO, HMIGXU, which could cause a temporary freeze of the HMI when a high rate of frames is receive...
CVE-2019-6833
A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels all versions of - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, XBTGT, HMIGXO, HMIGXU, which could cause a temporary freeze of the HMI when a high rate of frames is receive...
CVE-2019-6833
CVE-2019-6833 affects Schneider Electric Magelis HMI Panels (HMIGTO/HMISTO/XBTGH/HMIGTU/HMIGTUX/HMISCU/HMISTU/XBTGT/XBTGC/HMIGXO/HMIGXU), where a high rate of frames can cause a temporary HMI freeze; after the rate subsides, buffered commands are processed. Affected firmware versions: all listed ...
CVE-2019-6833
A CWE-754 – Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels all versions of - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, XBTGT, HMIGXO, HMIGXU, which could cause a temporary freeze of the HMI when a high rate of frames is receive...
Zbrunk universal data analysis system
Zbrunk project github began almost like a joke. And in a way it is. In short, my friends and I decided to make an open-source MIT license tool, which will be a kind of alternative to Splunk for some specific tasks. So, it will be possible to: Put structured JSON events in Zbrunk using http...
Siemens SIMATIC HMI Panels and TIA Portal <= v15.1 Update 1 XSS (ICSA-19-134-09)
Binary data 720276.prm...
Siemens SIMATIC HMI Panels and TIA Portal <= v15.1 Update 1 Insufficiently Protected Credentials (ICSA-19-134-09)
Binary data 720275.prm...
ProClima Uncontrolled Search Path Element Vulnerability
ProClima is a thermal calculation software from Schneider Electric that can be used to determine the best thermal solution for a control panel. An uncontrolled search path element vulnerability exists in versions prior to ProClima 8.0.0. An attacker could exploit this vulnerability to execute...
The vulnerability of ABB’s HMI panels allows attackers to gain unauthorized access to protected information.
The vulnerability of the HMI control panel interfaces of ABB automation systems—ABB CP620 1SAP520100R0001, CP620 1SAP520100R4001, CP620-WEB 1SAP520200R0001, CP630 1SAP530100R0001, CP630-WEB 1SAP530200R0001CP, CP635 1SAP535100R0001, CP635 1SAP535100R5001, CP635-B 1SAP535100R2001, CP635-WEB...
Brutality - A Fuzzer For Any GET Entries
A fuzzer for any GET entries. Features Multi-threading on demand Fuzzing, bruteforcing GET params Find admin panels Colored output Hide results by return code, word numbers Proxy support Big wordlist Colored Usages Install git clone https://github.com/ManhNho/brutality.git chmod 755 -R brutality/...
CVE-2019-6572
A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" All versions V15.1 Update 1, SIMATIC HMI Comfort Outdoor Panels 7" & 15" All versions V15.1 Update 1, SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F All versions V15.1 Update 1, SIMATIC WinCC...
CVE-2019-6572
A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" All versions V15.1 Update 1, SIMATIC HMI Comfort Outdoor Panels 7" & 15" All versions V15.1 Update 1, SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F All versions V15.1 Update 1, SIMATIC WinCC...
CVE-2019-6576
A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" All versions V15.1 Update 1, SIMATIC HMI Comfort Outdoor Panels 7" & 15" All versions V15.1 Update 1, SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F All versions V15.1 Update 1, SIMATIC WinCC...
CVE-2019-6576
CVE-2019-6576 affects Siemens SIMATIC HMI Comfort Panels (4"–22"), Comfort Outdoor Panels (7"/15"), KTP Mobile Panels (KTP400F, KTP700, KTP700F, KTP900, KTP900F), WinCC Runtime Advanced/Professional, WinCC (TIA Portal) and HMI Classic Devices (all versions prior to V15.1 Update 1). Root cause: in...
CVE-2019-6577
CVE-2019-6577 is an XSS vulnerability in Siemens SIMATIC HMI/WinCC products (Comfort Panels, Outdoor Panels, KTP Mobile Panels, WinCC Runtime/Pro, WinCC in TIAPortal, and HMI Classic devices) exploitable via the integrated web server when an attacker can modify device configuration through SNMP. ...
Multiple Siemens products vulnerable to encryption issues
Siemens SIMATIC WinCC is an automated data acquisition and monitoring SCADA system, Siemens SIMATIC HMI Comfort Panels is a touch panel device, Siemens SIMATIC HMI Comfort Outdoor Panels is a touch panel device for outdoor use, and Siemens SIMATIC HMI Comfort Outdoor Panels is a touch panel devic...
Siemens WinCC and SIMATIC HMI Panels < 11.0.2.1 XSS
Binary data 720005.prm...
Siemens WinCC and SIMATIC HMI Panels < 11.0.2.1 Directory Traversal
Binary data 720013.prm...