2001 matches found
CVE-2021-27416
CVE-2021-27416 affects Hitachi ABB Power Grids Ellipse EAM, prior to and including 9.0.25. The issue is cross-site scripting: an attacker entices a user to click a malicious link, potentially exposing confidential data or hijacking a session. Mitigation per multiple sources: update to Ellipse EAM...
ABB Relion Improper Input Validation (CVE-2018-20720)
ABB Relion 630 devices 1.1 before 1.1.0.C0, 1.2 before 1.2.0.B3, and 1.3 before 1.3.0.A6 allow remote attackers to cause a denial of service reboot via a reboot command in an SPA message. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
ABB FOX515T Improper Input Validation (CVE-2017-14025)
An Improper Input Validation issue was discovered in ABB FOX515T release 1.0. An improper input validation vulnerability has been identified, allowing a local attacker to provide a malicious parameter to the script that is not validated by the application, This could enable the attacker to retrie...
ABB Fox515T Exposure of Sensitive Information to an Unauthorized Actor (CVE-2017-15583)
The embedded web server on ABB Fox515T 1.0 devices is vulnerable to Local File Inclusion. It accepts a parameter that specifies a file for display or for use as a template. The filename is not validated; an attacker could retrieve any file. This plugin only works with Tenable.ot. Please visit...
Hitachi Energy Relion 670, 650 and SAM600-IO Improper Input Validation (CVE-2021-27196)
Improper Input Validation vulnerability in Hitachi ABB Power Grids Relion 670 Series, Relion 670/650 Series, Relion 670/650/SAM600-IO, Relion 650, REB500, RTU500 Series, FOX615 TEGO1, MSM, GMS600, PWC600 allows an attacker with access to the IEC 61850 network with knowledge of how to reproduce th...
ABB Relion 650 and 670 Series Improper Input Validation (CVE-2019-18247)
An attacker may use a specially crafted message to force Relion 650 series versions 1.3.0.5 and prior or Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior to reboot, which could cause a denial of service. This plugin only works with Tenable.ot. Please visit...
ABB Controller Asset Information
It is possible to obtain attributes of the remote ABB Controller device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc...
ABB Relion 670 Series Improper Limitation of a Pathname to a Restricted Directory (CVE-2019-18253)
An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior outside the intended directory. This plugin only works with Tenable.ot. Please visit...
CVE-2021-22288
Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive...
CVE-2021-22286
Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive...
CVE-2021-22285
Improper Handling of Exceptional Conditions, Improper Check for Unusual or Exceptional Conditions vulnerability in the ABB SPIET800 and PNI800 module that allows an attacker to cause the denial of service or make the module unresponsive...
Input validation
Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive...
Input validation
Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive...
CVE-2021-22285
The CVE-2021-22285 issue affects ABB Symphony Plus SPIET800 and PNI800 Ethernet interface modules. Root cause: improper handling of exceptional conditions and incomplete internal state distinction (CWE-372), leading to denial of service or unresponsiveness under network traffic. Affected products...
CVE-2021-22286
CVE-2021-22286 affects ABB Symphony Plus SPIET800 and PNI800 ethernet modules. The vulnerability, categorized under Improper Handling of Unexpected Data Type (CWE-241), arises from processing specially formatted IET protocol packets, which may cause the device to become unresponsive and trigger a...
CVE-2021-22288
The CVE-2021-22288 issue affects ABB Symphony Plus SPIET800 and PNI800 network interfaces. Public docs describe an Uncontrolled Resource Consumption vulnerability (CWE-400) that can cause the device to become unresponsive and require a reboot, with a CVSSv3.1 base score of 7.5 (Network, Low attac...
ABB SPIET800 输入验证错误漏洞
Abb Spiet800 is an Ethernet Ciu transport module from Abb Switzerland. A security vulnerability exists in the ABB SPIET800 and PNI800 due to an input validation error vulnerability exists, which arises from improper input validation in the module and allows an attacker to exploit the vulnerabilit...
CVE-2021-22285
Improper Handling of Exceptional Conditions, Improper Check for Unusual or Exceptional Conditions vulnerability in the ABB SPIET800 and PNI800 module that allows an attacker to cause the denial of service or make the module unresponsive...
CVE-2021-22272
The vulnerability origins in the commissioning process where an attacker of the ControlTouch can enter a serial number in a specific way to transfer the device virtually into her/his my.busch-jaeger.de or mybuildings.abb.com profile. A successful attacker can observe and control a ControlTouch...
Design/Logic Flaw
The vulnerability origins in the commissioning process where an attacker of the ControlTouch can enter a serial number in a specific way to transfer the device virtually into her/his my.busch-jaeger.de or mybuildings.abb.com profile. A successful attacker can observe and control a ControlTouch...