IBM Power HMC Elevation of Privilege Vulnerability

IBM Power HMC is a set of graphical interface software for configuring and managing the Power System family of servers from IBM in the United States. The software is primarily used to manage hardware such as servers. IBM Power HMC has an elevation of privilege vulnerability that could be exploite...

Security Bulletin: This Power System update is being released to address CVE-2021-20487

Summary Power9: A new Power Systems firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE-2021-20487. The Self Boot EngineSBE can be compromised from the service processor to allow injection of malicious code. An attacker that gains root access to the...

Chinese Hackers Targeted India's Power Grid Amid Geopolitical Tensions

Amid heightened border tensions between India and China, cybersecurity researchers have revealed a concerted campaign against India's critical infrastructure, including the nation's power grid, from Chinese state-sponsored groups. The attacks, which coincided with the standoff between the two...

IBM i 安全漏洞

The IBM Power System is a Power processor-based server computer from IBM in the United States. A security vulnerability exists in IBM Power9 processor, which can be exploited by an attacker to obtain sensitive information from data in the L1 cache under the right circumstances...

Denial of Service Vulnerability in Zhongyuan Huadian Digital-Analog Recording ZH-3D Dynamic Recording Device (CNVD-2020-01307)

Zhongyuan Huadian digital and analog recording ZH-3D dynamic recording device is a power system fault recording system primary voltage and current waveforms and secondary equipment action behavior, to achieve the power system fault analysis and fault ranging and positioning equipment. A...

Denial of Service Vulnerability in DPR-343-DA-G Power System Dynamic Recording Device of Guodian Nanrui Science and Technology Co.(CNVD-2020-01583)

DPR-343-DA-G Power System Dynamic Recording Device is a fault recording device based on DL/T860 framework and applied in new generation intelligent substation. A denial of service vulnerability exists in the DPR-343-DA-G Power System Dynamic Recording Device of Guodian Nanrui Technology...

Denial of Service Vulnerability in FTR-100 Power System Dynamic Recording Device (CNVD-2020-01299)

FTR-100 Power System Dynamic Recording Device is a device for power system digital substation. A denial of service vulnerability exists in the FTR-100 Power System Dynamic Recording Device, which can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in DPR-343-DA-G Power System Dynamic Recording Device of Guodian Nanrui Science and Technology Co.(CNVD-2020-01585)

DPR-343-DA-G Power System Dynamic Recording Device is a fault recording device based on DL/T860 framework and applied in new generation intelligent substation. A denial-of-service vulnerability exists in the DPR-343-DA-G Power System Dynamic Recording Device of Guodian Nanrui Technology...

Denial of Service Vulnerability in FTR-100 Power System Dynamic Recording Device (CNVD-2020-01298)

FTR-100 Power System Dynamic Recording Device is a device for power system digital substation. A denial of service vulnerability exists in the FTR-100 Power System Dynamic Recording Device, which can be exploited by attackers to cause a system crash...

Denial of Service Vulnerability in FTR-100 Power System Dynamic Recording Device (CNVD-2020-01297)

FTR-100 Power System Dynamic Recording Device is a device for power system digital substation. A denial of service vulnerability exists in the FTR-100 Power System Dynamic Recording Device, which can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in Zhongyuan Huadian Digital-Analog Recording ZH-3D Dynamic Recording Device

Zhongyuan Huadian digital and analog recording ZH-3D dynamic recording device is a power system fault recording system primary voltage and current waveforms and secondary equipment action behavior, to achieve the power system fault analysis and fault ranging and positioning equipment. A denial of...

Denial of Service Vulnerability in DPR-343-DA-G Power System Dynamic Recording Device of Guodian Nanrui Technology Co.

DPR-343-DA-G Power System Dynamic Recording Device is a fault recording device based on DL/T860 framework and applied in new generation intelligent substation. A denial of service vulnerability exists in the DPR-343-DA-G Power System Dynamic Recording Device of Guodian Nanrui Technology...

Denial of Service Vulnerability in DPR-343-DA-G Power System Dynamic Recording Device of Guodian Nanrui Science and Technology Co.(CNVD-2020-01584)

DPR-343-DA-G Power System Dynamic Recording Device is a fault recording device based on DL/T860 framework and applied in new generation intelligent substation. A denial-of-service vulnerability exists in the DPR-343-DA-G Power System Dynamic Recording Device of Guodian Nanrui Technology...

Denial of Service Vulnerability in FTR-100 Power System Dynamic Recording Device

FTR-100 Power System Dynamic Recording Device is a device for power system digital substation. A denial of service vulnerability exists in the FTR-100 Power System Dynamic Recording Device, which can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in Zhongyuan Huadian Digital-Analog Recording ZH-3D Dynamic Recording Device (CNVD-2020-01308)

Zhongyuan Huadian digital and analog recording ZH-3D dynamic recording device is a power system fault recording system primary voltage and current waveforms and secondary equipment action behavior, to achieve the power system fault analysis and fault ranging and positioning equipment. A denial of...

Denial of Service Vulnerability in FTR-100 Power System Dynamic Recording Device (CNVD-2020-01296)

FTR-100 Power System Dynamic Recording Device is a device for power system digital substation. A denial of service vulnerability exists in the FTR-100 Power System Dynamic Recording Device, which can be exploited by attackers to cause a denial of service...

Siemens SPPA-T3000 Application Server Improper Authentication Vulnerability (CNVD-2019-45416)

SPPA-T3000 is a distributed control system mainly used in thermal power plants and large-scale renewable energy power plants.Application Server is the application server in it, which provides the main system services including access control, distribution of data to thin clients and archiving. A...

Siemens SIPROTEC 5 7SA82 Power Systems Monitoring and Protection Device

Binary data 765244.prm...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service attacks. This is due to a missing processor feature check and an erroneous use of transactional memory TM instructions in the core dump path. A crash can be triggered from unprivileged userspace during core dump on a POWER system with a certain...

Buffer Overflow Vulnerability in Multiple IBM Products

The IBM Power System S922, among others, is a Power processor-based server device from IBM in the United States. A buffer overflow vulnerability exists in the boot loader in several IBM products. An attacker could exploit this vulnerability to overwrite the bootloader's instruction memory, bypass...