Buffer overflow

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. A buffer overflow allows attackers to cause a denial of service and possibly execute arbitrary code via an IP address with a long hostname...

CVE-2019-13566

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. A buffer overflow allows attackers to cause a denial of service and possibly execute arbitrary code via an IP address with a long hostname...

CVE-2019-13566

CVE-2019-13566 affects ROS communications-related packages (ros_comm / ros-melodic-ros-comm) up to version 1.14.3. The issue is a buffer overflow triggered by an IP address with a long hostname, leading to denial of service and potentially arbitrary code execution. No remediation details are prov...

CVE-2019-13566

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. A buffer overflow allows attackers to cause a denial of service and possibly execute arbitrary code via an IP address with a long hostname...

CVE-2019-13566

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. A buffer overflow allows attackers to cause a denial of service and possibly execute arbitrary code via an IP address with a long hostname...

A glimpse into the present state of security in robotics

Download full report PDF The world of today continues its progress toward higher digitalization and mobility. From developments in the Internet of Things IoT through augmented reality to Industry 4.0, whichrely on stronger automation and use of robots, all of these bring more efficiency to...

Meet Aztarna, a tool to find vulnerable Internet connected robots

By Waqas The company behind Aztarna is Alias Robotics, a cyber-security startup. Manufacturers and users of IoT robots should breathe a sigh of relief that the cyber-security startup Alias Robotics has developed a robot scanning tool that can track any robot connected to the internet and powered ...

ros-bilet.ru XSS vulnerability

Open Bug Bounty ID: OBB-682452 Description| Value ---|--- Affected Website:| ros-bilet.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-10681

roslib-socketio - The standard ROS Javascript Library fork for add support to socket.io roslib-socketio downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources with an attacker...

CVE-2017-12736

After initial configuration, the Ruggedcom Discovery Protocol RCDP is still able to write to the device under certain conditions. This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions...

Design/Logic Flaw

A vulnerability has been identified in RUGGEDCOM ROS for RSL910 devices All versions ROS V5.0.1, RUGGEDCOM ROS for all other devices All versions ROS V4.3.4, SCALANCE XB-200/XC-200/XP-200/XR300-WG All versions between V3.0 including and V3.0.2 excluding, SCALANCE XR-500/XM-400 All versions betwee...

CVE-2017-12736

After initial configuration, the Ruggedcom Discovery Protocol RCDP is still able to write to the device under certain conditions. This could allow an attacker located in the adjacent network of the targeted device to perform unauthorized administrative actions...

CVE-2017-12736

CVE-2017-12736 affects Siemens Ruggedcom ROS and SCALANCE devices. After initial configuration, the Ruggedcom Discovery Protocol (RCDP) can still write to the device under certain conditions, potentially allowing an attacker in the adjacent network to perform unauthorized administrative actions. ...

PT-2017-12674 · Siemens · Ruggedcom Ros +4

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM ROS for RSL910 devices versions prior to 5.0.1 RUGGEDCOM ROS for all other devices versions prior to 4.3.4 SCALANCE XB-200/XC-200/XP-200/XR300-WG versions 3.0 through 3.0.2 excluding 3.0.2 SCALANCE XR-500/XM-400 versions 6.1 through...

ros-dengi.ru XSS vulnerability

Open Bug Bounty ID: OBB-378556 Description| Value ---|--- Affected Website:| ros-dengi.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

Siemens Patches Improper Access Vulnerability in Ruggedcom Protocol

Industrial manufacturer Siemens is encouraging users running devices that use its Ruggedcom Discovery Protocol RCDP to apply firmware updates this week. The updates resolve a serious and remotely exploitable vulnerability that could let an attacker carry out administrative actions. The issue, an...

Siemens Ruggedcom ROS, SCALANCE

CVSS v3 8.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: Ruggedcom ROS, SCALANCE Vulnerability: Improper Access Control UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-17-271-01A Siemens Ruggedcom ROS, SCALANCE...

Siemens Ruggedcom ROS, SCALANCE (Update A)

CVSS v3 8.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: Ruggedcom ROS, SCALANCE Vulnerability: Improper Access Control UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-17-271-01 Siemens Ruggedcom ROS and SCALAN...

[ASA-201706-9] wireshark-cli: denial of service

Arch Linux Security Advisory ASA-201706-9 ========================================= Severity: Low Date : 2017-06-12 CVE-ID : CVE-2017-9343 CVE-2017-9344 CVE-2017-9345 CVE-2017-9346 CVE-2017-9347 CVE-2017-9348 CVE-2017-9349 CVE-2017-9350 CVE-2017-9351 CVE-2017-9352 CVE-2017-9353 CVE-2017-9354...

Wireshark 2.2.0 to 2.2.12 - ROS Dissector Denial of Service Vulnerability

Exploit for windows platform in category dos / poc Source: https://bugs.wireshark.org/bugzilla/showbug.cgi?id=13637 Build Information: TShark Wireshark 2.3.0 v2.3.0rc0-3235-gd97ce76161 Copyright 1998-2017 Gerald Combs and contributors. License GPLv2+: GNU GPL version 2 or later This is free...