Siemens SCALANCE M-800 Family Improper Input Validation (CVE-2024-50560)

Affected devices truncates usernames longer than 15 characters when accessed via SSH or Telnet. This could allow an attacker to compromise system integrity. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

Siemens SCALANCE M-800 Family Improper Limitation of a Pathname to a Restricted Directory (CVE-2024-50559)

Affected devices do not properly validate the filenames of the certificate. This could allow an authenticated remote attacker to append arbitrary values which will lead to compromise of integrity of the system. This plugin only works with Tenable.ot. Please visit...

CVE-2024-10944

creationtimestamp| type| source ---|---|--- 2024-11-12 17:11:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113471093668002487 2024-11-12 18:54:01+00:00| seen| https://t.me/cvedetector/10674 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-...

CVE-2024-10945

creationtimestamp| type| source ---|---|--- 2024-11-12 17:11:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113471093683272747 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-14...

CVE-2024-10943

creationtimestamp| type| source ---|---|--- 2024-11-12 17:01:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113471054051069316 2024-11-12 18:53:59+00:00| seen| https://t.me/cvedetector/10673 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-...

CVE-2024-50561

creationtimestamp| type| source ---|---|--- 2024-11-12 14:22:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113470427647496718 2024-11-12 14:41:29+00:00| seen| https://t.me/cvedetector/10597 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-...

CVE-2024-50572

creationtimestamp| type| source ---|---|--- 2024-11-12 14:22:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113470427663412276 2024-11-12 14:41:28+00:00| seen| https://t.me/cvedetector/10596 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-...

CVE-2024-50559

creationtimestamp| type| source ---|---|--- 2024-11-12 14:22:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113470427614824827 2024-11-12 14:41:32+00:00| seen| https://t.me/cvedetector/10600 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-...

CVE-2024-50558

creationtimestamp| type| source ---|---|--- 2024-11-12 14:07:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113470368610434851 2024-11-12 14:41:30+00:00| seen| https://t.me/cvedetector/10599 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-...

CVE-2024-50310

creationtimestamp| type| source ---|---|--- 2024-11-12 14:06:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113470368567680188 2024-11-12 14:41:38+00:00| seen| https://t.me/cvedetector/10604 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-...

CVE-2024-47942

creationtimestamp| type| source ---|---|--- 2024-11-12 13:51:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113470309567485069 2024-11-12 14:41:37+00:00| seen| https://t.me/cvedetector/10603 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-...

CVE-2024-46894

creationtimestamp| type| source ---|---|--- 2024-11-12 13:36:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113470250508542440 2024-11-12 14:41:44+00:00| seen| https://t.me/cvedetector/10608 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-...

CVE-2024-47783

creationtimestamp| type| source ---|---|--- 2024-11-12 13:36:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113470250522659199 2024-11-12 14:41:45+00:00| seen| https://t.me/cvedetector/10609 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-...

CVE-2024-46889

creationtimestamp| type| source ---|---|--- 2024-11-12 13:21:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113470191442066903 2024-11-12 14:41:46+00:00| seen| https://t.me/cvedetector/10610 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-...

CVE-2024-46888

creationtimestamp| type| source ---|---|--- 2024-11-12 13:21:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113470191407753691 2024-11-12 14:41:53+00:00| seen| https://t.me/cvedetector/10615 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-...

CVE-2023-32736

creationtimestamp| type| source ---|---|--- 2024-11-12 13:03:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113470118630017027 2024-11-12 13:06:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113470132311309724 2024-11-14 12:00:00+00:00| seen|...

CISA Releases Five Industrial Control Systems Advisories

CISA released five Industrial Control Systems ICS advisories on November 12, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-317-01 Subnet Solutions PowerSYSTEM Center ICSA-24-317-02 Hitachi Energy TRO600...

Microsoft Releases November 2024 Security Updates

Microsoft released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary updates: Microsoft...

CVE-2024-37365

creationtimestamp| type| source ---|---|--- 2024-11-12 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-317-03 2024-11-12 17:12:50+00:00| seen| https://t.me/cvedetector/10628...

Ivanti Releases Security Updates for Multiple Products

Ivanti released security updates to address vulnerabilities in Ivanti Endpoint Manager EPM, Ivanti Avalanche, Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Security Access Client. CISA encourages users and administrators to review the following Ivanti security advisories and apply the...