Buffer overflow

KASAGO TCP/IP stack provided by Zuken Elmic generates ISNsInitial Sequence Number for TCP connections from an insufficiently random source. An attacker may be able to determine the ISN of the current or future TCP connections and either hijack existing ones or spoof future ones...

CVE-2022-43501

CVE-2022-43501 concerns the KASAGO TCP/IP stack from Zuken Elmic, which uses an insufficiently random generator for TCP Initial Sequence Numbers (ISNs). This weak RNG can allow an attacker to determine ISNs for current or future connections, enabling session hijacking or spoofing of new connectio...

CVE-2022-43501

KASAGO TCP/IP stack provided by Zuken Elmic generates ISNsInitial Sequence Number for TCP connections from an insufficiently random source. An attacker may be able to determine the ISN of the current or future TCP connections and either hijack existing ones or spoof future ones...

CVE-2022-43501

KASAGO TCP/IP stack provided by Zuken Elmic generates ISNsInitial Sequence Number for TCP connections from an insufficiently random source. An attacker may be able to determine the ISN of the current or future TCP connections and either hijack existing ones or spoof future ones...

CVE-2022-25735 Null Pointer Dereference in MODEM

Denial of service in modem due to missing null check while processing TCP or UDP packets from server...

CVE-2022-25735 Null Pointer Dereference in MODEM

Denial of service in modem due to missing null check while processing TCP or UDP packets from server...

CVE-2022-25735

The CVE-2022-25735 issue is described as a Denial of Service in a Qualcomm modem/chipset, caused by a missing null check when processing TCP or UDP packets from the server. Affected component is the modem logic in the device’s Qualcomm-based modem stack; impact is Availability disruption (CVSS v3...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2023-1345)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial of service

B&R APROL versions R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which may allow a network based attacker to cause an application Denial-of-Service...

CVE-2022-43765

B&R APROL (before R 4.2-07) is affected by a DoS vulnerability in the Tbase database server. The issue stems from incorrect checking of a return value when processing specially formatted data packets sent to port 55502/tcp, which can be exploited remotely to cause an application DoS. Affected sof...

Schneider Electric Modicon Exposure of Sensitive Information to an Unauthorized Actor (CVE-2021-22786)

A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the controller when communicating over the Modbus TCP protocol. Affected Products: Modicon M340 CPU part numbers BMXP34 Versions prior to V3.30, Modicon M580 CPU par...

EulerOS 2.0 SP8 : kernel (EulerOS-SA-2023-1345)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function tcpgetsockopt/tcpsetsockopt of the...

macOS Dirty Cow Arbitrary File Write Local Privilege Escalation Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'macOS Dirty Cow Arbitrary File Write Local Privilege Escalation', 'Description' = %q An app may be able to execute arbitrary code with kernel...

Moxa SDS-3008 Series Industrial Ethernet Switch web application information disclosure vulnerability

Talos Vulnerability Report TALOS-2022-1621 Moxa SDS-3008 Series Industrial Ethernet Switch web application information disclosure vulnerability February 2, 2023 CVE Number CVE-2022-40691 SUMMARY An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008...

CVE-2021-22786

A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the controller when communicating over the Modbus TCP protocol. Affected Products: Modicon M340 CPU part numbers BMXP34 Versions prior to V3.30, Modicon M580 CPU par...

CVE-2021-22786

A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the controller when communicating over the Modbus TCP protocol. Affected Products: Modicon M340 CPU part numbers BMXP34 Versions prior to V3.30, Modicon M580 CPU par...

Information disclosure

A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the controller when communicating over the Modbus TCP protocol. Affected Products: Modicon M340 CPU part numbers BMXP34 Versions prior to V3.30, Modicon M580 CPU par...

CVE-2021-22786

A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on the memory of the controller when communicating over the Modbus TCP protocol. Affected Products: Modicon M340 CPU part numbers BMXP34 Versions prior to V3.30, Modicon M580 CPU par...

CVE-2021-22786

Schneider Electric CVE-2021-22786 is an information-exposure vulnerability in Modicon controllers over Modbus TCP. Affected products/versions: Modicon M340 CPU (BMXP34*) prior to V3.30, M580 CPU (BMEP*/BMEH*) prior to SV3.20, MC80 (BMKC80) prior to V1.6, M580 Safety (BMEP58*/BMEH58*) all versions...

多款Schneider Electric产品 信息泄露漏洞

The Schneider Electric Modicon M580 and Schneider Electric Modicon M340 are both products of the French company Schneider Electric.The Schneider Electric Modicon M580 is a programmable automation The Schneider Electric Modicon M340 is a medium-range PLC programmable logic controller for industria...