TUNER web service Code Execution

The vulnerability of the TUNER web service on the TeNIX programmable logic controllers M1500 and M3000 is related to the absence of name filtering when generating a 404 HTTP error page. As a result, the name of the non-existent webpage is passed unchanged to the generated error page. Exploiting...

Taserver Web Service Code Execution

The vulnerability of the TAserver web service for the TeNIX programmable logic controllers MFC1500 and MFC3000 lies in the lack of name filtering when generating a 404 HTTP error page. As a result, the name of the non-existent web page is passed unchanged to the generated error page. Exploiting...

TeNIX pnp-receive.sh Disk Exhaustion

The vulnerability of the pnp-receive.sh service on the TeNIX programmable logic controllers MFC1500 and MFC3000 operating system is related to the absence of an authentication process. Exploiting this vulnerability allows a malicious actor to exhaust the device’s disk space by sending arbitrary...

TeNIX PLC Full Access

The vulnerability of the TeNIX operating system for programmable logic controllers MFC1500 and MFC3000 is related to the use of a default weak password for the root account, information about which is not available in the documentation. Exploiting this vulnerability could allow an attacker,...

pnp-save.sh Service Data Read

The vulnerability of the pnp-save.sh service in the TeNIX operating system for programmable logic controllers MFC1500 and MFC3000 is related to the absence of an authentication process. Exploiting this vulnerability allows a malicious actor to remotely read data stored by other users on the devic...

PT-2018-2154

Name of the Vulnerable Software and Affected Versions TeNIX versions affected versions not specified Description The issue is related to a lack of filtering for non-existent web page names when generating a 404 error page in the HTTP protocol, allowing an attacker to inject arbitrary code into th...

PT-2018-2153

Name of the Vulnerable Software and Affected Versions TeNIX affected versions not specified Description The issue is related to the lack of an authentication procedure in the pnp-save.sh service of the TeNIX operating system used in МФК1500 and МФК3000 programmable logic controllers. This allows ...

PT-2018-2152

Name of the Vulnerable Software and Affected Versions TeNIX versions affected versions not specified Description The issue is related to the lack of an authentication procedure in the pnp-receive.sh service of the TeNIX operating system used in МФК1500 and МФК3000 programmable logic controllers...

PT-2018-2151

Name of the Vulnerable Software and Affected Versions TeNIX versions affected versions not specified Description The issue is related to the use of a weak default password for the root account in the TeNIX operating system of МФК1500 and МФК3000 programmable logic controllers. This password...