MikroTik RouterOs Reachable Assertion (CVE-2020-20211)

Mikrotik RouterOs 6.44.5 long-term tree suffers from an assertion failure vulnerability in the /nova/bin/console process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet. This plugin only works with Tenable.ot. Please visit...

MikroTik RouterOS Uncontrolled Resource Consumption (CVE-2020-20221)

Mikrotik RouterOs before 6.44.6 long-term tree suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/cerm process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU. This plugin only works with Tenable.ot. Please visit...

MikroTik RouterOs Out-of-bounds Write (CVE-2020-20237)

Mikrotik RouterOs 6.46.3 stable tree suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service due to improper memory access. This plugin only works with Tenable.ot. Please visit...

MikroTik RouterOS Missing Release of Memory after Effective Lifetime (CVE-2020-22844)

A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service DOS via crafted SMB requests. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

MikroTik RouterOS Improper Limitation of a Pathname to a Restricted Directory (CVE-2018-14847)

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface. This plugin only works with Tenable.ot. Please visit...

MikroTik RouterOS Uncontrolled Resource Consumption (CVE-2020-20021)

An issue discovered in MikroTik Router v6.46.3 and earlier allows attacker to cause denial of service via misconfiguration in the SSH daemon. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

MikroTik RouterOS Integer Underflow (CVE-2019-16160)

An integer underflow in the SMB server of MikroTik RouterOS before 6.45.5 allows remote unauthenticated attackers to crash the service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

MikroTik RouterOS Out-of-bounds Write (CVE-2021-41987)

In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code execution. The attacker must know the scepservername value. This affects RouterOS 6.46.8, 6.47.9, and 6.47.10. This plugin only works with Tenable.ot. Please...

MikroTik RouterOs Divide By Zero (CVE-2020-20253)

Mikrotik RouterOs before 6.47 stable tree suffers from a divison by zero vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service due to a divide by zero error. This plugin only works with Tenable.ot. Please visit...

MikroTik RouterOs Out-of-bounds Write (CVE-2020-20236)

Mikrotik RouterOs 6.46.3 stable tree suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service due to improper memory access. This plugin only works with Tenable.ot. Please visit...

MikroTik RouterOs Out-of-bounds Write (CVE-2020-20218)

Mikrotik RouterOs 6.44.6 long-term tree suffers from a memory corruption vulnerability in the /nova/bin/traceroute process. An authenticated remote attacker can cause a Denial of Service due via the loop counter variable. This plugin only works with Tenable.ot. Please visit...

MikroTik RouterOS Improper Privilege Management (CVE-2023-30799)

MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super- admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrar...

MikroTik RouterOS Path Traversal (CVE-2019-3943)

MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote directory traversal via the HTTP or Winbox interfaces. An authenticated, remote attack can use this vulnerability to read and write files...

MikroTik RouterBOARD Improper Input Validation (CVE-2017-17537)

MikroTik RouterBOARD v6.39.2 and v6.40.5 allows an unauthenticated remote attacker to cause a denial of service by connecting to TCP port 53 and sending data that begins with many '\0' characters, possibly related to DNS. This plugin only works with Tenable.ot. Please visit...

Siemens CP1604 and CP1616 Improper Neutralization of Input During Web Page Generation (CVE-2018-13809)

A vulnerability has been identified in CP 1604 All versions, CP 1616 All versions. The integrated web server of the affected CP devices could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into following a malicious link. User interaction is required for a successful...

Siemens CP1604 and CP1616 Cross-Site Request Forgery (CVE-2018-13810)

A vulnerability has been identified in CP 1604 All versions, CP 1616 All versions. The integrated configuration web server of the affected CP devices could allow a Cross-Site Request Forgery CSRF attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation...

Siemens SIMATIC CP products Improper Access Control (CVE-2023-37194)

A vulnerability has been identified in SIMATIC CP 1604 All versions, SIMATIC CP 1616 All versions, SIMATIC CP 1623 All versions, SIMATIC CP 1626 All versions, SIMATIC CP 1628 All versions. The kernel memory of affected devices is exposed to user-mode via direct memory access DMA which could allow...

Wago Multiple Products Improper Privilege Management (CVE-2023-3379)

Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to escalate non-root privileges. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-...

Wago 750-88X and 750-89X Cross-site Scripting (CVE-2018-16210)

WAGO 750-88X and WAGO 750-89X Ethernet Controller devices, versions 01.09.1813 and before, have XSS in the SNMP configuration via the webserv/cplcfg/snmp.ssi SNMPDESC or SNMPLOCSNMPCONT field. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mor...

RICOH SP C250 Series Buffer Overflow (CVE-2019-14308)

Several Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of service or code execution via crafted requests to the LPD service. Affected firmware versions depend on the printer models. One affected configuration is...