EUVD-2024-36006

Malicious code in bioql PyPI...

CVE-2024-36266

A vulnerability has been identified in PowerSys All versions V3.11. The affected application insufficiently protects responses to authentication requests. This could allow a local attacker to bypass authentication, thereby gaining administrative privileges for the managed remote devices...

The vulnerability of the service program for the operation, maintenance, and diagnosis of PowerLink 50/100 and SWT 3000 PowerSys devices stems from deficiencies in the authentication process. This allows attackers to circumvent security restrictions and gain increased privileges.

The vulnerability of the service program for the operation, maintenance, and diagnosis of PowerLink 50/100 and SWT 3000 PowerSys devices is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to circumvent security restrictions and enhance thei...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in several products, including SCALANCE, SICAM, Tecnomatix, SITOP and PowerSys. The vulnerabilities potentially enable a malicious person to carry out attacks that could lead to the following categories of damage: - Denial-of-Service DoS - Manipulation of data -...

CVE-2024-36266

A vulnerability has been identified in PowerSys All versions V3.11. The affected application insufficiently protects responses to authentication requests. This could allow a local attacker to bypass authentication, thereby gaining administrative privileges for the managed remote devices...

CVE-2024-36266

A vulnerability has been identified in PowerSys All versions V3.11. The affected application insufficiently protects responses to authentication requests. This could allow a local attacker to bypass authentication, thereby gaining administrative privileges for the managed remote devices...

CVE-2024-36266

A vulnerability has been identified in PowerSys All versions V3.11. The affected application insufficiently protects responses to authentication requests. This could allow a local attacker to bypass authentication, thereby gaining administrative privileges for the managed remote devices...

CVE-2024-36266

A vulnerability has been identified in PowerSys All versions V3.11. The affected application insufficiently protects responses to authentication requests. This could allow a local attacker to bypass authentication, thereby gaining administrative privileges for the managed remote devices...

CVE-2024-36266

CVE-2024-36266 affects Siemens PowerSys (all versions before v3.11). The vulnerability centers on improper authentication: PowerSys reportedly returns responses to authentication requests that can be exploited by a local attacker to bypass authentication and obtain administrative privileges on ma...

Siemens PowerSys Authentication Error Vulnerability

PowerSys is a service program for commissioning, maintenance and diagnostics of PowerLink 50/100 or SWT 3000 devices. An authentication error vulnerability exists in Siemens PowerSys, which can be exploited by a local attacker to bypass authentication and gain administrative privileges to a manag...

PT-2024-4598 · Powersys · Powersys

Name of the Vulnerable Software and Affected Versions: PowerSys versions prior to V3.11 Description: A vulnerability has been identified in the affected application, where it insufficiently protects responses to authentication requests. This could allow a local attacker to bypass authentication,...

Siemens PowerSys 授权问题漏洞

PowerSys is a service program for commissioning, maintenance and diagnostics of PowerLink 50/100 or SWT 3000 devices. An authentication error vulnerability exists in Siemens PowerSys, which can be exploited by a local attacker to bypass authentication and gain administrative privileges to a manag...

Siemens PowerSys

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...