Lucene search
K

149 matches found

BDU FSTEC
BDU FSTEC
added 2022/10/13 12:0 a.m.3 views

The vulnerability of Siemens’ programmable logic controllers’ microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to execute arbitrary code.

The vulnerability of Siemens’ programmable logic controllers’ microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.05184EPSS
Exploits0References4Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/08/31 12:0 a.m.5 views

The vulnerability of the SX-Programmer Expert (D300win) programming tool, related to the execution of operations beyond the buffer boundaries, may affect data integrity.

The vulnerability of the SX-Programmer Expert D300win programming tool for programmable logic controllers is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

7.8CVSS8.1AI score0.00468EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.3 views

The vulnerability of HID Mercury programmable logic controllers’ microprogramming software, related to security mechanism failures, allows a intruder to alter the “notes” section on the web interface’s home page.

The vulnerability of HID Mercury programmable logic controllers’ microprogramming software is related to security mechanism errors. Exploiting this vulnerability could allow a malicious actor to modify the “notes” section on the web interface’s home page using a specially created package...

5.3CVSS6.2AI score0.00756EPSS
Exploits0References7Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/06/28 12:0 a.m.5 views

The vulnerability of microprogrammed software in PACsystems programmable logic controllers, related to insufficient verification of data authenticity, allows a intruder to execute arbitrary code.

The vulnerability of microprogrammed programmable logic controllers from PACsystems is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary code using a specially crafted file written in...

10CVSS6AI score
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/28 12:0 a.m.4 views

The vulnerability of embedded images of PACsystems programmable logic controllers allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of embedded images of PACsystems programmable logic controllers is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data, compromise its integrity, and even cause...

10CVSS5.5AI score
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:0 a.m.1 views

The vulnerability of microprogrammed software for programmable logic controllers of the SYSMAC CS/CJ/CP series lies in insufficient data authenticity checking, allowing attackers to execute arbitrary commands.

The vulnerability of microprogrammed software in programmable logic controllers of the SYSMAC CS/CJ/CP series is related to insufficient verification of data authenticity. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...

10CVSS5.8AI score
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:0 a.m.3 views

The vulnerability of the microprogrammed software of the SYSMAC programmable logic controllers series CS1/CJ1/CP1/CP2 lies in the transmission of confidential information in open text, allowing an intruder to gain unauthorized access to the protected information.

The vulnerability of the microprogramming software used in SYSMAC programmable logic controllers of the CS1/CJ1/CP1/CP2 series is related to the transmission of confidential information in open text format. Exploiting this vulnerability can allow an unauthorized person to gain unauthorized access...

7.8CVSS5.5AI score
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:0 a.m.4 views

The vulnerability of the implementation of the S-Bus protocol in microprogrammed software for programmable logic controllers (PCD controllers) allows a intruder to disclose protected information.

The vulnerability of the S-Bus protocol implementation in microprogrammed programmable logic controllers PCD controllers is related to the use of a non-safe hash algorithm for password hashing. Exploiting this vulnerability could allow an attacker to disclose the protected information...

7.8CVSS5.5AI score
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:0 a.m.4 views

The vulnerability of the S-Bus protocol implementation in microprogrammed programmable logic controllers (PCD controllers) allows attackers to circumvent the “white list” restrictions and enhance their privileges.

The vulnerability of the S-Bus protocol implementation in microprogrammed programmable logic controllers PCD controllers is related to errors in processing the “white list”. Exploiting this vulnerability can allow an attacker to bypass the restrictions of the “white list” and enhance their...

10CVSS5.5AI score
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:0 a.m.3 views

The vulnerability of microprogrammed software in programmable logic controllers like ControlEdge, which stems from the use of rigidly encoded user data, allows attackers to exploit their privileges.

The vulnerability of microprogrammed software in programmable logic controllers like ControlEdge stems from the use of rigidly encoded user data. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

10CVSS5.4AI score
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/24 12:0 a.m.4 views

The vulnerabilities of microprogrammed software in programmable logic controllers such as ILC 1x0, ILC 1x1, ILC 1x1 GSM/GPRS, ILC 3xx, AXC 1050, AXC 1050 XC, AXC 3050, RFC 480S PN 4TX, RFC 470 PN 3TX, RFC 470S PN 3TX, RFC 460R PN 3TX, RFC 460R PN 3TX-S, RFC 430 ETH-IB, RFC 450 ETH-IB, PC WORX SRT, PC WORX RT BASIC, and FC 350 PCI ETH are related to authentication process flaws. These flaws allow attackers to gain unauthorized access to protected information or compromise the integrity of that information.

The vulnerabilities of the microprogrammed logic controllers ILC 1x0, ILC 1x1, ILC 1x1 GSM/GPRS, ILC 3xx, AXC 1050, AXC 1050 XC, AXC 3050, RFC 480S PN 4TX, RFC 470 PN 3TX, RFC 470S PN 3TX, RFC 460R PN 3TX, RFC 460R PN 3TX-S, RFC 430 ETH-IB, RFC 450 ETH-IB, PC WORX SRT, PC WORX RT BASIC, and FC 35...

10CVSS7.8AI score0.03079EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2022/06/24 12:0 a.m.1 views

The vulnerability of microprogrammed software in programmable logic controllers such as AXC 1050, AXC 1050 XC, AXC 3050, FC 350 PCI ETH, ILC1x0, ILC1x1, ILC 1x1 GSM/GPRS, ILC 3xx, PC WORX RT BASIC, PC WORX SRT, RFC 430 ETH-IB, RFC 450 ETH-IB, RFC 460R PN 3TX, RFC 460R PN 3TX-S, RFC 470 PN 3TX, RFC 470S PN 3TX, RFC 480S PN 4TX arises from insufficient data authenticity checks. This allows attackers to gain full control over the device.

The vulnerabilities of microprogrammed software in programmable logic controllers such as AXC 1050, AXC 1050 XC, AXC 3050, FC 350 PCI ETH, ILC1x0, ILC1x1, ILC 1x1 GSM/GPRS, ILC 3xx, PC WORX RT BASIC, PC WORX SRT, RFC 430 ETH-IB, RFC 450 ETH-IB, RFC 460R PN 3TX, RFC 460R PN 3TX-S, RFC 470 PN 3TX,...

10CVSS7.8AI score0.01455EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2022/06/10 12:0 a.m.3 views

The vulnerability of HID Mercury programmable logic controllers’ microprogramming software arises from the lack of measures taken to neutralize special elements used in the operating system commands. This allows attackers to execute arbitrary shell commands.

The vulnerability of HID Mercury programmable logic controllers exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to remotely execute arbitrary shell commands by sending a special...

9CVSS8.2AI score0.01217EPSS
Exploits0References7Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/06/08 12:0 a.m.4 views

The vulnerability of HID Mercury programmable logic controllers’ microprogramming software lies in the fact that copying buffers occurs without checking the size of the input data. This allows an attacker to execute arbitrary code.

The vulnerability of HID Mercury programmable logic controllers’ microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created update file...

10CVSS8.4AI score0.01434EPSS
Exploits0References7Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.4 views

The vulnerability of microprogrammed software in programmable logic controllers such as ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, CompactLogix 5480, and Compact GuardLogix 5380 lies in improper code generation. This allows attackers to implant code into the controller that the user will be unable to detect.

The vulnerability of microprogrammed software in programmable logic controllers such as ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, CompactLogix 5480, and Compact GuardLogix 5380 lies in improper code generation. Exploiting this vulnerability allows an intruder to implant code into the...

7.7CVSS7.5AI score0.03398EPSS
Exploits0References3
CNVD
CNVD
added 2022/04/13 12:0 a.m.13 views

Siemens SCALANCE X-300 Switch Family Devices缓冲区溢出漏洞

SCALANCE X switches are used to connect to industrial components such as programmable logic controllers PLCs or human-machine interfaces HMIs.SIPLUS extreme is designed for reliable operation under extreme conditions.A buffer overflow vulnerability exists in Siemens SCALANCE X-300 Switch Family...

8.8CVSS3.5AI score0.01552EPSS
Exploits0References1
CNVD
CNVD
added 2022/04/13 12:0 a.m.16 views

Siemens SCALANCE X-300 Switch Family Devices跨站请求伪造漏洞

SCALANCE X switches are used to connect industrial components such as programmable logic controllers PLCs or human-machine interfaces HMIs.SIPLUS extreme is designed for reliable operation under extreme conditions.A cross-site request forgery vulnerability exists in Siemens SCALANCE X-300 Switch...

8.8CVSS3.2AI score0.00498EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:0 a.m.1 views

The vulnerability of the microprogrammed software for WAGO 750-8212 programmable logic controllers (PFC200), related to the manipulation of inter-site requests, allows intruders to carry out inter-site attack attacks.

The vulnerability of the microprogrammed software of WAGO 750-8212 programmable logic controllers PFC200 is related to the manipulation of intersite requests. Exploiting this vulnerability allows a remote attacker to perform intersite attack attacks...

5.3CVSS5.5AI score
Exploits0References5
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.3 views

Siemens SCALANCE安全漏洞

SCALANCE X switches are used to connect industrial components such as programmable logic controllers PLCs or human machine interfaces HMIs.SIPLUS extreme is designed for reliable operation under extreme conditions. A buffer overflow vulnerability exists in Siemens SCALANCE X-300 Switch Family...

7.8CVSS7.6AI score0.01294EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/04/12 12:0 a.m.2 views

多款 Siemens 产品跨站请求伪造漏洞

SCALANCE X switches are used to connect industrial components such as programmable logic controllers PLCs or human-machine interfaces HMIs.SIPLUS extreme is designed for reliable operation under extreme conditions.A cross-site request forgery vulnerability exists in Siemens SCALANCE X-300 Switch...

8.8CVSS7.7AI score0.00498EPSS
Exploits0References3
Rows per page
Query Builder