Lucene search
K

594 matches found

CNNVD
CNNVD
added 2021/08/04 12:0 a.m.2 views

HCC Embedded InterNiche 安全特征问题漏洞

The SENTRON 3WA COM190 is an accessory module for 3WA circuit breakers providing connectivity via PROFINET IO and Modbus TCP.The SENTRON 3WL COM35 is an accessory module for 3WL circuit breakers providing connectivity via PROFINET IO and Modbus TCP.The SENTRON 7KM PAC The Switched Ethernet PROFIN...

9.1CVSS5.5AI score0.00408EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2021/07/13 12:0 a.m.2 views

PT-2021-11518 · Siemens +1 · Development Evaluation Kits For Profinet Io Dk Standard Ethernet Controller +178

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows an unauthenticated attacker to trigger a denial of service condition by sending a large amount of DCP reset packets to the device. Recommendations: At the moment,...

8.7CVSS7.3AI score0.0108EPSS
Exploits0References6
ICS
ICS
added 2021/07/13 12:0 a.m.69 views

Siemens PROFINET Devices

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: PROFINET Devices Vulnerability: Allocation of Resources Without Limits or Throttling 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled...

8.7CVSS7.7AI score0.0108EPSS
Exploits0References10
OSV
OSV
added 2021/02/16 5:15 p.m.1 views

CVE-2021-20986

A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication...

7.5CVSS7AI score0.00468EPSS
Exploits0References2
NVD
NVD
added 2021/02/16 5:15 p.m.10 views

CVE-2021-20986

A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication...

7.5CVSS0.00468EPSS
Exploits0References2
Prion
Prion
added 2021/02/16 5:15 p.m.9 views

Denial of service

A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication...

5CVSS7.4AI score0.00468EPSS
Exploits0References2Affected Software24
Cvelist
Cvelist
added 2021/02/16 4:35 p.m.12 views

CVE-2021-20986 Hilscher: Denial of Service vulnerability in PROFINET IO Device

A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication...

7.5CVSS7.7AI score0.00468EPSS
Exploits0References2
CVE
CVE
added 2021/02/16 4:35 p.m.39 views

CVE-2021-20986

CVE-2021-20986 affects Hilscher PROFINET IO Device V3, prior to version V3.14.0.7. The vulnerability enables a Denial of Service that may cause an unexpected loss of cyclic communication or interruption of acyclic communication. Root cause details are not fully enumerated in the provided document...

7.5CVSS7.5AI score0.00468EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2021/02/16 12:0 a.m.4 views

Hilscher PROFINET IO Device Security Vulnerability

A security vulnerability exists in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7, which is rooted in a denial-of-service vulnerability and results in the unexpected loss of periodic communication or interruption of non-periodic communication...

7.5CVSS7.1AI score0.00468EPSS
Exploits0References3
OSV
OSV
added 2020/12/17 11:15 p.m.1 views

CVE-2020-12521

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot...

6.5CVSS6.6AI score0.00084EPSS
Exploits0References1
NVD
NVD
added 2020/12/17 11:15 p.m.10 views

CVE-2020-12521

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot...

6.5CVSS6.3AI score0.00084EPSS
Exploits0References1
Prion
Prion
added 2020/12/17 11:15 p.m.16 views

Design/Logic Flaw

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot...

6.1CVSS6.4AI score0.00084EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/12/17 10:43 p.m.50 views

CVE-2020-12521

CVE-2020-12521 concerns Phoenix Contact PLCnext Control Devices (pre-2021.0 LTS). A specially crafted LLDP packet can cause a high load in the PROFINET stack, potentially leading to system service failures or a complete reboot. The vulnerability is described across multiple sources as an input va...

6.5CVSS6.3AI score0.00084EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/17 10:43 p.m.11 views

CVE-2020-12521 Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: A specially crafted LLDP packet may lead to a high system load in the PROFINET stack.

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot...

6.5CVSS6.4AI score0.00084EPSS
Exploits0References1
CNNVD
CNNVD
added 2020/12/17 12:0 a.m.4 views

Phoenix Contact PLCnext Control Devices 输入验证错误漏洞

Phoenix Contact PLCnext Control Devices is a programmable logic controller for industrial environments from Phoenix Contact. An input validation error vulnerability exists in Phoenix Contact PLCnext Control Devices prior to version 2021.0 LTS, which stems from a specially designed LLDP packet tha...

6.5CVSS6.6AI score0.00084EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2020/11/17 12:0 a.m.30 views

Cisco IOS Software PROFINET Link Layer Discovery Protocol DoS (cisco-sa-ios-profinet-dos-65qYG3W5)

According to its self-reported version and configuration, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the PROFINET handler for Link Layer Discovery Protocol LLDP messages. An unauthenticated, adjacent attacker can exploit thisby sending ...

7.4CVSS7.6AI score0.00101EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2020/11/17 12:0 a.m.43 views

Cisco IOS XE Software PROFINET Link Layer Discovery Protocol DoS (cisco-sa-ios-profinet-dos-65qYG3W5)

According to its self-reported version and configuration, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the PROFINET handler for Link Layer Discovery Protocol LLDP messages. An unauthenticated, adjacent attacker can exploit thisby sendi...

7.4CVSS7.6AI score0.00101EPSS
Exploits0References2
NVD
NVD
added 2020/11/02 9:15 p.m.10 views

CVE-2020-5657

Improper neutralization of argument delimiters in a command 'Argument Injection' vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Modul...

6.5CVSS7.3AI score0.00171EPSS
Exploits0References3
NVD
NVD
added 2020/11/02 9:15 p.m.11 views

CVE-2020-5655

NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before,...

7.5CVSS8AI score0.00601EPSS
Exploits0References3
Prion
Prion
added 2020/11/02 9:15 p.m.18 views

Design/Logic Flaw

Improper neutralization of argument delimiters in a command 'Argument Injection' vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Modul...

3.3CVSS7.2AI score0.00171EPSS
Exploits0References3
Rows per page
Query Builder