编号撤回

Robot Operating System is a meta-operating system for robots. This CVE number has been withdrawn...

CVE-2022-45837

Reflected Cross-Site Scripting XSS vulnerability in Denis 微信机器人高级版 plugin = 6.0.1 versions...

WordPress Plugin 微信机器人高级版 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

FANUC Robot Controllers Out-of-Bounds Write (CVE-2021-32998)

The FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code. INIT START/restore from backup required. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mo...

FANUC Robot Controllers Integer Coercion Error (CVE-2021-32996)

The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to crash. A restart is required. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable,...

Siemens SCALANCE W1750D Cryptographic Issues (CVE-2017-13099)

wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable wolfSSL application. This vulnerability is referred to as ROBOT. This plugin only works with Tenable.ot...

SUSE CVE-2017-13098

BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE Java Cryptography Extension for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable...

Weixin Robot Advanced <= 6.0.1 - Reflected XSS

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2022-33323

Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected mod...

Authentication flaw

Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected mod...

CVE-2022-33323

CVE-2022-33323 affects Mitsubishi Electric MELFA MELFA SD/SQ and F-Series robot controllers. Root cause: active debug code enables an authentication bypass allowing a remote, unauthenticated telnet login to gain unauthorized access. Affected firmware versions include S7x/R7x and prior; fixes are ...

CVE-2022-33323 Authentication Bypass Vulnerability in Robot Controller of MELFA SD/SQ series and F-series

Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected mod...

CVE-2022-33323 Authentication Bypass Vulnerability in Robot Controller of MELFA SD/SQ series and F-series

Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected mod...

CVE-2022-23334

The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries, allowing attackers to have write access and escalate privileges via replacing NEWTESTREMOTEMANAGER.EXE...

CVE-2022-23334

The CVE-2022-23334 vulnerability affects Ip-label Newtest’s Robot application prior to version 8.5R0. The issue is weak signature checks on binaries before execution, enabling an attacker to gain write access and escalate privileges by replacing NEWTESTREMOTEMANAGER.EXE. Affected software is Ip-l...

Mitsubishi Electric MELFA Robot Controllers 安全漏洞

Mitsubishi Electric MELFA Robot Controllers are high-precision robotic arm controllers from Mitsubishi Electric Japan. A security vulnerability exists in Mitsubishi Electric MELFA Robot Controllers, which stems from an authentication bypass vulnerability caused by active debugging code, which cou...

PT-2023-1355 · Mitsubishi · Melfa Sd/Sq Series +1

Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series affected versions not specified Description: The issue concerns a remote unauthenticated attacker gaining unauthorized access through an unauthorized telne...

Mitsubishi Electric MELFA SD/SQ series and F-series Robot Controllers

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Corporation Equipment: MELFA SD/SQ series and F-series Robot Controllers Vulnerability: Active Debug Code 2. RISK EVALUATION Successful exploitation of this vulnerability could allow...

CVE-2022-48217

The tfremappernode component 1.1.1 for Robot Operating System ROS allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior. This occurs because a topic name depends on the attacker-controlled oldtftopicname and/or newtftopicname...

CVE-2022-48217

The tfremappernode component 1.1.1 for Robot Operating System ROS allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior. This occurs because a topic name depends on the attacker-controlled oldtftopicname and/or newtftopicname...