Lucene search
+L

363 matches found

Cvelist
Cvelist
•added 2020/08/31 4:11 p.m.•43 views

CVE-2020-7523

Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver see security notification for versions which could cause local privilege escalation when the Modbus Serial Driver service is invoked. The driver does not properly assign, modify, track, or check privileg...

7.9AI score0.00194EPSS
SaveExploits0References1
CVE
CVE
•added 2020/08/31 4:11 p.m.•67 views

CVE-2020-7523

Schneider Electric Modbus Serial Driver contains an improper privilege management vulnerability that could enable local privilege escalation when the Modbus Serial Driver service is invoked. The driver reportedly does not properly assign, modify, track, or check privileges for an actor, creating ...

7.8CVSS7.8AI score0.00194EPSS
SaveExploits0References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/31 12:00 a.m.•10 views

CVE-2020-7523: Improper Privilege Management

Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver see security notification for versions which could cause local privilege escalation when the Modbus Serial Driver service is invoked. The driver does not properly assign, modify, track, or check privileg...

7.8CVSS5.9AI score0.00194EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/08/20 12:00 a.m.•19 views

Schneider Electric Modbus Privilege Escalation

The vulnerability of the Schneider Electric Modbus Serial Driver and Schneider Electric Modbus Driver Suite lies in the insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.00194EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2020/08/11 12:00 a.m.•8 views

PT-2020-3650

Name of the Vulnerable Software and Affected Versions Schneider Electric Modbus Serial Driver affected versions not specified Schneider Electric Modbus Driver Suite affected versions not specified Description The issue is related to improper privilege management, which could lead to local privile...

7.8CVSS0.00194EPSS
SaveExploits0References8
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•44 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1488)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.7AI score0.061EPSS
SaveExploits12References2
CNVD
CNVD
•added 2019/05/24 12:00 a.m.•20 views

Schneider Electric Modbus Serial Driver Resource Management Error Vulnerability

Schneider Electric Modbus Serial Driver is a serial driver from Schneider Electric France. A resource management error vulnerability exists in the Schneider Electric Modbus Serial Driver. An attacker could exploit this vulnerability to perform write operations to system files or other critical us...

6.8CVSS6.9AI score0.00876EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2019/05/22 8:29 p.m.•18 views

CVE-2018-7824

An Externally Controlled Reference to a Resource CWE-610 vulnerability exists in Schneider Electric Modbus Serial Driver For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior which could allow write acce...

4.9CVSS5.8AI score0.00876EPSS
SaveExploits0References1
NVD
NVD
•added 2019/05/22 8:29 p.m.•30 views

CVE-2018-7824

An Externally Controlled Reference to a Resource CWE-610 vulnerability exists in Schneider Electric Modbus Serial Driver For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior which could allow write acce...

6.8CVSS5.2AI score0.00876EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/05/22 7:27 p.m.•33 views

CVE-2018-7824

An Externally Controlled Reference to a Resource CWE-610 vulnerability exists in Schneider Electric Modbus Serial Driver For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior which could allow write acce...

5.2AI score0.00876EPSS
SaveExploits0References1
CVE
CVE
•added 2019/05/22 7:27 p.m.•76 views

CVE-2018-7824

The CVE-2018-7824 entry concerns Schneider Electric Modbus Serial Driver. Affected components are the Modbus Serial Driver for 64‑bit Windows (V3.17 IE37 and prior) and 32‑bit Windows (V2.17 IE27 and prior), including the Driver Suite (V14.12 and prior). The vulnerability is an External Control o...

6.8CVSS5.2AI score0.00876EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/05/22 12:00 a.m.•11 views

CVE-2018-7824: Externally Controlled Reference to a Resource in Another Sphere

An Externally Controlled Reference to a Resource CWE-610 vulnerability exists in Schneider Electric Modbus Serial Driver For 64-bit Windows OS:V3.17 IE 37 and prior , For 32-bit Windows OS:V2.17 IE 27 and prior, and as part of the Driver Suite version:V14.12 and prior which could allow write acce...

6.8CVSS5.9AI score0.00876EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2019/05/13 12:00 a.m.•45 views

EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1480)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way the Linux kernel's futex subsystem handled the requeuing of certain Priority Inheritance PI futexes. ...

7.8CVSS6.6AI score0.37233EPSS
SaveExploits29References22
Tenable Nessus
Tenable Nessus
•added 2019/05/13 12:00 a.m.•45 views

EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1488)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way the Linux kernel handled IRET faults during the processing of NMIs. An unprivileged, local user could...

10CVSS6.2AI score0.061EPSS
SaveExploits12References23
Positive Technologies
Positive Technologies
•added 2019/04/09 12:00 a.m.•15 views

PT-2019-6002

Name of the Vulnerable Software and Affected Versions Schneider Electric Modbus Serial Driver versions V3.17 IE 37 and prior Schneider Electric Modbus Serial Driver versions V2.17 IE 27 and prior Schneider Electric Modbus Serial Driver version V14.12 and prior Description The issue is related to...

6.8CVSS0.00876EPSS
SaveExploits0References6
Ubuntu
Ubuntu
•added 2019/04/02 9:36 p.m.•133 views

USN-3933-1: Linux kernel vulnerabilities

It was discovered that an information leak vulnerability existed in the Bluetooth implementation of the Linux kernel. An attacker within Bluetooth range could possibly expose sensitive information kernel memory. CVE-2017-1000410 It was discovered that the USB serial device driver in the Linux...

8.1CVSS6.3AI score0.16523EPSS
SaveExploits13
CNVD
CNVD
•added 2019/02/14 12:00 a.m.•9 views

Linux kernel denial of service vulnerability (CNVD-2019-38527)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A denial of service vulnerability exists in the changeportsettings file in drivers/usb/serial/ioti.c in Linux kernel versions prior to 4.11.3. A local attacker could...

5.5CVSS7.1AI score0.0043EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2019/01/31 9:00 a.m.•33 views

CVE-2017-18360

In changeportsettings in drivers/usb/serial/ioti.c in the Linux kernel before 4.11.3, local users could cause a denial of service by division-by-zero in the serial device layer by trying to set very high baud rates...

5.5CVSS6.1AI score0.0043EPSS
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2019/01/31 12:00 a.m.•19 views

UBUNTU-CVE-2017-18360

In changeportsettings in drivers/usb/serial/ioti.c in the Linux kernel before 4.11.3, local users could cause a denial of service by division-by-zero in the serial device layer by trying to set very high baud rates...

5.5CVSS6.7AI score0.0043EPSS
SaveExploits0References5
ICS
ICS
•added 2018/09/06 12:00 p.m.•64 views

Schneider Electric Serial Modbus Driver Buffer Overflow

OVERVIEW Carsten Eiram of Risk-Based Security has identified a stack-based buffer overflow vulnerability in Schneider Electric’s Serial Modbus Driver that affects 11 Schneider Electric products. Schneider Electric has produced patches that mitigate this vulnerability. This vulnerability can be...

9.3CVSS7.4AI score0.22217EPSS
SaveExploits10References19
Rows per page
Query Builder