CVE-2024-6784

creationtimestamp| type| source ---|---|--- 2024-12-05 12:47:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113600288661662675 2024-12-05 15:21:14+00:00| seen| https://t.me/cvedetector/12080 2025-01-07 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-...

CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS advisories on December 5, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-340-01 AutomationDirect C-More EA9 Programming Software ICSA-24-340-02 Planet Technolo...

AutomationDirect C-More EA9 Programming Software

RISK EVALUATION Successful exploitation of these vulnerabilities could result in memory corruption; a buffer overflow condition may allow remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities...

CISA Warns of Active Exploitation of Flaws in Zyxel, ProjectSend, and CyberPanel

The U.S. Cybersecurity and Infrastructure Security Agency CISA added multiple security flaws affecting products from Zyxel, North Grid Proself, ProjectSend, and CyberPanel to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The list of...

CISA Releases New Public Version of CDM Data Model Document

Today, the Cybersecurity and Infrastructure Security Agency CISA released an updated public version of the Continuous Diagnostics and Mitigation CDM Data Model Document. Version 5.0.1 aligns with fiscal year 2023 Federal Information Security Modernization Act FISMA metrics. The CDM Data Model...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-51378link is external CyberPanel Incorrect Default Permissions Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actor...

Phoenix Contact Classic Line Controllers Insufficient Verification of Data Authenticity (CVE-2022-31800)

An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

CISA Releases Eight Industrial Control Systems Advisories

CISA released eight Industrial Control Systems ICS advisories on December 3, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-338-01 Ruijie Reyee OS ICSA-24-338-02 Siemens RUGGEDCOM APE1808 ICSA-24-338-03 Open...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-45727link is external North Grid Proself Improper Restriction of XML External Entity XEE Reference Vulnerability CVE-2024-11680link is external ProjectSend...

CISA and Partners Release Joint Guidance on PRC-Affiliated Threat Actor Compromising Networks of Global Telecommunications Providers

Today, CISA—in partnership with the National Security Agency NSA, the Federal Bureau of Investigation FBI, and international partners—released joint guidance, Enhanced Visibility and Hardening Guidance for Communications Infrastructure. Partners of this guidance include: Australian Signals...

CVE-2024-47043

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01 2024-12-06 18:14:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113607238645282439 2024-12-06 19:48:45+00:00| seen| https://t.me/cvedetector/122...

CVE-2024-48874

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01 2024-12-06 18:26:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113607286258124103 2024-12-06 20:38:58+00:00| seen| https://t.me/cvedetector/122...

CVE-2024-8300

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-04 2025-03-11 11:30:05+00:00| seen| https://t.me/truesecator/6826 2025-03-11 11:31:39+00:00| seen|...

CVE-2024-9852

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-04 2025-03-11 11:30:05+00:00| seen| https://t.me/truesecator/6826 2025-03-11 11:31:39+00:00| seen|...

CVE-2024-51727

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01 2024-12-06 18:14:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113607238660158313 2024-12-06 19:48:43+00:00| seen| https://t.me/cvedetector/122...

CVE-2024-46874

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01 2024-12-06 18:26:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113607286230169597 2024-12-06 20:38:59+00:00| seen| https://t.me/cvedetector/122...

CVE-2024-47146

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01 2024-12-06 20:39:00+00:00| seen| https://t.me/cvedetector/12274...

CVE-2024-11220

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-03 2024-12-06 17:51:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113607147250428125 2024-12-06 19:48:46+00:00| seen| https://t.me/cvedetector/122...

CVE-2024-45722

creationtimestamp| type| source ---|---|--- 2024-12-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01 2024-12-06 18:26:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113607286215845352 2024-12-06 20:38:58+00:00| seen| https://t.me/cvedetector/122...

Open Automation Software

RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker executing code with escalated privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to...