495 matches found
Rockwell Automation ControlLogix Bugs Expose Industrial Systems to Remote Attacks
The U.S. Cybersecurity and Infrastructure Security Agency CISA has alerted of two security flaws impacting Rockwell Automation ControlLogix EtherNet/IP ENIP communication module models that could be exploited to achieve remote code execution and denial-of-service DoS. "The results and impact of...
CVE-2023-3595
Where this vulnerability exists in the Rockwell Automation 1756 EN2 and 1756 EN3 ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modif...
CVE-2023-3596
Where this vulnerability exists in the Rockwell Automation 1756-EN4 Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages...
Remote code execution
Where this vulnerability exists in the Rockwell Automation 1756 EN2 and 1756 EN3 ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modif...
Design/Logic Flaw
Where this vulnerability exists in the Rockwell Automation 1756-EN4 Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages...
CVE-2023-3596 Rockwell Automation Allen-Bradley ControlLogix Communication Modules vulnerable to Denial of Service
Where this vulnerability exists in the Rockwell Automation 1756-EN4 Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages...
CVE-2023-3596 Rockwell Automation Allen-Bradley ControlLogix Communication Modules vulnerable to Denial of Service
Where this vulnerability exists in the Rockwell Automation 1756-EN4 Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages...
CVE-2023-3596
CVE-2023-3596 affects Rockwell Automation 1756-EN4* Ethernet/IP communication modules. It is an out-of-bounds write (CWE-787) that could allow a malicious user to cause a denial-of-service by sending crafted CIP messages to the affected modules, per NVD/ICS advisories. No known public exploits ar...
CVE-2023-3595 Rockwell Automation ControlLogix Communication Modules Vulnerable to Remote Code Execution
Where this vulnerability exists in the Rockwell Automation 1756 EN2 and 1756 EN3 ControlLogix communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modif...
Rockwell Automation Select Communication Modules Out-of-Bounds Write (CVE-2023-3596)
A vulnerability exists in the 1756-EN4 products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
Rockwell Automation 1756 缓冲区错误漏洞
The Rockwell Automation 1756 is a scalable controller solution from Rockwell Automation. It is capable of addressing a large number of I/O points. A security vulnerability exists in the Rockwell Automation 1756-EN4, which originates from a malicious user who may be able to assert a denial of...
Rockwell Automation Select Communication Modules Out-of-Bounds Write (CVE-2023-3595)
A vulnerability exists in the 1756 EN2 and 1756 EN3 products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device...
cyfs-cip (>=0.5.0, <=0.6.4) potentially affected by unknown CVE via cyfs-base (>=0.5.5, <=0.6.12)
cyfs-base CARGO version =0.5.5, =0.5.0, =0.6.4 Source cves: unknown CVE Source advisory: OSV:GHSA-G753-GHR7-Q33W...
cyfs-cip (>=0.5.0, <=0.6.4) potentially affected by unknown CVE via cyfs-base (>=0.5.5, <=0.6.12)
cyfs-base CARGO version =0.5.5, =0.5.0, =0.6.4 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0046...
Wireshark 1.4.x < 1.4.15 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.15 advisory. - Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before...
Siemens RUGGEDCOM CROSSBOW Access Control Error Vulnerability
RUGGEDCOM CROSSBOW is a secure access management solution designed to provide NERC CIP-compliant access to intelligent electronic devices. an access control error vulnerability exists in Siemens RUGGEDCOM CROSSBOW, which stems from the failure of the affected application's client-side query handl...
Siemens RUGGEDCOM CROSSBOW Access Control Error Vulnerability (CNVD-2023-17661)
RUGGEDCOM CROSSBOW is a secure access management solution designed to provide NERC CIP-compliant access to intelligent electronic devices. an access control error vulnerability exists in Siemens RUGGEDCOM CROSSBOW, which stems from the failure of the affected application's client-side query handl...
Siemens RUGGEDCOM CROSSBOW SQL Injection Vulnerability
RUGGEDCOM CROSSBOW is a secure access management solution designed to provide NERC CIP-compliant access to intelligent electronic devices.A SQL injection vulnerability exists in Siemens RUGGEDCOM CROSSBOW, which stems from the fact that the audit logs of affected applications are vulnerable to SQ...
Siemens RUGGEDCOM CROSSBOW Access Control Error Vulnerability (CNVD-2023-17662)
An access control error vulnerability exists in Siemens RUGGEDCOM CROSSBOW, a secure access management solution designed to provide NERC CIP-compliant access to intelligent electronic devices, which stems from a failure of the affected application's client-side query handler to check for...
Debian: Security Advisory (DLA-1226-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...