1705 matches found
CVE-2023-2673
CVE-2023-2673 concerns the PHOENIX CONTACT FL/TC MGUARD Family, where improper input validation may allow UDP packets to bypass filtering rules and reach the device behind the MGUARD, potentially enabling flooding attacks. The NVD entry notes a network-exposed impact with availability impact (LOW...
CVE-2023-2673 PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation
Improper Input Validation vulnerability in PHOENIX CONTACT FL/TC MGUARD Family in multiple versions may allow UDP packets to bypass the filter rules and access the solely connected device behind the MGUARD which can be used for flooding attacks...
PHOENIX CONTACT FL/TC MGUARD 输入验证错误漏洞
The PHOENIX CONTACT FL/TC MGUARD is a series of routers from PHOENIX Electric Germany. An input validation error vulnerability exists in the PHOENIX CONTACT FL/TC MGUARD that stems from a vulnerability that allows UDP packets to bypass filtering rules and access the uniquely connected device behi...
phoenixpackaging.com Cross Site Scripting vulnerability OBB-3334773
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
phoenixtyres.ie Cross Site Scripting vulnerability OBB-3319965
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
MAL-2023-439 Malicious code in fierce-obsessions-the-phoenix-pack-6-by-suzanne-wright-online-new-pages- (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d309b64e65ce538e138c50c84a995d8c8015ab61d9affd4cffdc92a79d71738 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Phoenix Contact ENERGY AXC PU Path Traversal (CVE-2023-1109)
In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the...
CVE-2023-1109
In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the...
CVE-2023-1109
In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the...
Design/Logic Flaw
In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the...
CVE-2023-1109 PHOENIX CONTACT: Directory Traversal Vulnerability in ENERGY AXC PU Web service
In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the...
CVE-2023-1109
Phoenix Contact ENERGY AXC PU Web Service is affected by a path traversal vulnerability (CVE-2023-1109). An authenticated restricted user can craft URLs through the upload/download functionality to access, read, write, and create files across the file system, potentially gaining full control of t...
CVE-2023-1109 PHOENIX CONTACT: Directory Traversal Vulnerability in ENERGY AXC PU Web service
In Phoenix Contacts ENERGY AXC PU Web service an authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload and download functionality of the web service. This may lead to full control of the...
PHOENIX CONTACT ENERGY AXC PU 路径遍历漏洞
The PHOENIX CONTACT ENERGY AXC PU is an energy management device from PHOENIX CONTACT, Germany, typically used to monitor and control energy flow in solar and wind energy systems. A path traversal vulnerability exists in versions prior to PHOENIX CONTACT ENERGY AXC PU V04.15.00.00, which originat...
PT-2023-7105 · Phoenix Contact · Phoenix Contacts Energy Axc Pu
Name of the Vulnerable Software and Affected Versions: Phoenix Contacts ENERGY AXC PU versions affected versions not specified Description: The issue is related to a web service vulnerability that allows an authenticated restricted user of the web frontend to access, read, write, and create files...
PHOENIX CONTACT ProConOS/ProConOS eCLR 安全漏洞
PHOENIX CONTACT ProConOS/ProConOS eCLR is a series of embedded automation devices from PHOENIX CONTACT, Germany. A security vulnerability exists in the PHOENIX CONTACT ProConOS/ProConOS eCLR, which stems from an incorrect assignment of critical resource privileges that allows an unauthenticated,...
phoenixlasermd.com Cross Site Scripting vulnerability OBB-3222213
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
phoenixcprclasses.com Cross Site Scripting vulnerability OBB-3222209
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Wago PLC Cycle Time Influences Uncontrolled Resource Consumption (CVE-2019-10953)
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets. This plugin only works with Tenable.ot. Please visit...
Phoenix Contact PLCnext Improper Input Validation (CVE-2021-34570)
Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable,...