CVE-2020-9475

The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows local privilege escalation via a race condition in logrotate. By using an exploit chain, an attacker with access to the network can get root access on the gateway...

Race condition

The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows local privilege escalation via a race condition in logrotate. By using an exploit chain, an attacker with access to the network can get root access on the gateway...

Remote code execution

The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows remote code execution via the backup functionality in the web frontend. By using an exploit chain, an attacker with access to the network can get root access on the gateway...

CVE-2020-9475

The S. Siedle & Soehne SG 150-0 Smart Gateway (versions before 1.2.4) is affected by a local privilege escalation due to a race condition in logrotate. An attacker with network access can chain exploits to gain root access on the gateway. The issue is documented across multiple sources (e.g., CVE...

CVE-2020-9475

The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows local privilege escalation via a race condition in logrotate. By using an exploit chain, an attacker with access to the network can get root access on the gateway...

CVE-2020-9474

The SG 150-0 Smart Gateway from S.Siedle & Soehne is affected prior to version 1.2.4. A remote code execution exists via the backup function in the web frontend, and an attacker with network access can escalate to root on the gateway. Remediation: upgrade to version 1.2.4 or later (as cited in CN...

CVE-2020-9474

The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows remote code execution via the backup functionality in the web frontend. By using an exploit chain, an attacker with access to the network can get root access on the gateway...

CVE-2020-6081

An exploitable code execution vulnerability exists in the PLCTask functionality of 3S-Smart Software Solutions GmbH CODESYS Runtime 3.5.14.30. A specially crafted network request can cause remote code execution. An attacker can send a malicious packet to trigger this vulnerability...

Design/Logic Flaw

An exploitable code execution vulnerability exists in the PLCTask functionality of 3S-Smart Software Solutions GmbH CODESYS Runtime 3.5.14.30. A specially crafted network request can cause remote code execution. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2020-6081

An exploitable code execution vulnerability exists in the PLCTask functionality of 3S-Smart Software Solutions GmbH CODESYS Runtime 3.5.14.30. A specially crafted network request can cause remote code execution. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2020-6081

An exploitable code execution vulnerability exists in the PLCTask functionality of 3S-Smart Software Solutions GmbH CODESYS Runtime 3.5.14.30. A specially crafted network request can cause remote code execution. An attacker can send a malicious packet to trigger this vulnerability...

HPE Smart Update Manager Access Restriction Bypass Vulnerability

HPE Smart Update Manager SUM is a smart update manager from Hewlett Packard Enterprise HPE, USA. It is used to install and update firmware and software components on HP ProLiant and HP Integrity servers, chassis, and options. A security vulnerability exists in HPE Smart Update Manager SUM version...

Plaza Toke has a flawed logic vulnerability

Plaza Token PLAZA is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'mintToken' function in PLAZA's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

KMCToken has a flawed logic vulnerability

KMCToken is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in KMCToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

Gold Reward has a flawed logic vulnerability

Gold Reward GRX is an ethereum-based virtual currency.A security vulnerability in the 'sell' function in the smart contract implementation of GRX arises from the ability of an attacker to specify a selling price. The vulnerability can be exploited by an attacker to cause financial loss to the buy...

Logic flaw vulnerability in Globalvillage ecosystem

Globalvillage ecosystem GVE is a virtual currency system based on blockchain technology.A security vulnerability exists in the 'approveAndCallcode' function in GVE's smart contract implementation, which stems from the program's failure to validate the callcode. The vulnerability can be exploited ...

AzurionToken Digital Error Vulnerability

AzurionToken AZU is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'mintToken' function in AZU's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

CCindex10 has a logic flaw vulnerability

CCindex10 T10 is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'mintToken' function in T10's smart contract. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

Coinstar Digital Error Vulnerability

Coinstar CSTR is an Ether-based digital currency.An integer overflow vulnerability exists in the 'mintToken' function in CSTR's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

SwftCoin has a logic flaw vulnerability

SwftCoin SWFTC is an ethereum-based virtual currency. The 'buy' function in SWFTC's smart contract implementation has a security vulnerability that stems from the fact that an attacker can specify the price at which to buy. The vulnerability can be exploited by an attacker to cause financial loss...