Siemens SCALANCE X-400 Product Family Switch Detection

Binary data 765122.prm...

Siemens SCALANCE X-300 Product Family Switch Detection

Binary data 765121.prm...

Siemens SCALANCE XM408-4C Managed Modular IE Switch

Binary data 765085.prm...

Emerson DeltaV Smart Switch Multiple Vulnerabilities (ICSA-18-228-01)

Binary data 720301.prm...

Siemens SCALANCE XM408-8C Managed Modular IE Switch

Binary data 765087.prm...

Siemens SCALANCE XM408-8C Managed Modular IE Switch

Binary data 765084.prm...

Siemens SCALANCE XM416-4C Managed Modular IE Switch

Binary data 765089.prm...

Siemens SCALANCE XM408-4C Managed Modular IE Switch

Binary data 765086.prm...

Emerson DeltaV Smart Switch Hardcoded Credentials (ICSA-19-190-01)

Binary data 720299.prm...

Emerson DeltaV Smart Switch DoS (ICSA-19-010-01)

Binary data 720300.prm...

CVE-2019-13920

A vulnerability has been identified in SINEMA Remote Connect Server All versions V2.0 SP1. Some parts of the web application are not protected against Cross Site Request Forgery CSRF attacks. The security vulnerability could be exploited by an attacker that is able to trigger requests of a...

Siemens SINEMA Remote Connect Server Cross-Site Request Forgery Vulnerability

Siemens SINEMA Remote Connect Server is a server application. SINEMA Remote Connect allows users to access remote equipment or machines so that maintenance can be performed easily and safely. A security vulnerability exists in Siemens SINEMA Remote Connect Server. An attacker could exploit this...

ALPINE-CVE-2019-15903

In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XMLGetCurrentLineNumber or XMLGetCurrentColumnNumber then resulted in a heap-based buffer over-read...

Pwning a Siemens Scalance ICS switch through ARM reversing

We’ve been working in industrial control systems security for a long time. Several of the team here used to work in OT control rooms or support SCADA environments. Whilst pen testing a ship control system, we noticed a heavy reliance on Siemens Scalance industrial ethernet switches, so bought a...

Denial of Service Vulnerability in MOXA EtherDevice Switch EDS Series Switches

MOXA EtherDevice Switch EDS series is a series of industrial switches introduced by Moxa. A denial of service vulnerability exists in the MOXA EtherDevice Switch EDS Series switches. An attacker could exploit this vulnerability to cause a denial of service...

Internet Bug Bounty: Linux kernel: CVE-2017-1000112: a memory corruption due to UFO to non-UFO path switch

Hi! CVE-2017-1000112 is a vulnerability I found in the Linux kernel caused by a UFO to non-UFO path switch for UFO packets. It can be exploited to gain kernel code execution from an unprivileged process. This vulnerability was reported to [email protected] and linux-distros@ following the...

Cisco NX-OS Software Privilege License and Access Control Issues Vulnerability

Cisco NX-OS Software is a set of data center-grade operating system software for switches from the U.S. company Cisco Cisco. A permission and access control issue vulnerability exists in the Simple Network Management Protocol Access Control Column feature of Cisco NX-OS Software, which can be...

Cisco NX-OS Software Resource Management Error Vulnerability (CNVD-2019-32062)

Cisco Nexus 3000 Series Switches are Cisco products.Cisco Nexus 3000 Series Switches is a 3000 series switch.Cisco Nexus 3500 Platform Switches is a 3500 series platform switch.Cisco MDS 9000 Series Multilayer Switches is a MDS 9000 series multilayer switch.Cisco NX-OS Software is a set of data...

Microsoft Windows and Windows Server Remote Code Execution Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows, which arises from the...

Denial of Service Vulnerability in MOXA EDS-405A Industrial Switch

The EDS-405A/408A series are 5-port and 8-port entry-level managed Ethernet switches designed for industrial applications. A denial-of-service vulnerability exists in the MOXA EDS-405A industrial switches, which can be exploited by an attacker to construct a special data message that can cause th...