182 matches found
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A business logic error vulnerability exists in the Huawei HarmonyOS communication module. The vulnerability stems from a business logic error in the...
CVE-2020-14504
The web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST requests. A remote, unauthenticated attacker can send a crafted request that may allow for modification of the configuration settings...
CVE-2020-14502
Rockwell Automation 1734-AENTR Series B/C are affected by CVE-2020-14502 due to a stored XSS in the web interface. The vulnerability allows a remote, unauthenticated attacker to store a script that can modify homepage text. Technical details are documented in ICS advisory ICSA-21-063-01, which li...
CVE-2020-14502: Improper Neutralization of Input During Web Page Generation
The web interface of the 1734-AENTR communication module is vulnerable to stored XSS. A remote, unauthenticated attacker could store a malicious script within the web interface that, when executed, could modify some string values on the homepage of the web interface...
PT-2022-8571
Name of the Vulnerable Software and Affected Versions 1734-AENTR communication module affected versions not specified Description The web interface of the communication module is vulnerable to stored XSS, allowing a remote, unauthenticated attacker to store a malicious script that, when executed,...
CVE-2020-14504: Improper Access Control
The web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST requests. A remote, unauthenticated attacker can send a crafted request that may allow for modification of the configuration settings...
CobaltStrikeParser - Python parser for CobaltStrike Beacon's configuration
Python parser for CobaltStrike Beacon's configuration Description Use parsebeaconconfig.py for stageless beacons, memory dumps or C2 urls with metasploit compatibility mode default true. Many stageless beacons are PEs where the beacon code itself is stored in the .data section and xored with 4-by...
Authentication flaw
Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packets to cause a denial of...
PT-2021-20188
Name of the Vulnerable Software and Affected Versions Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 affected versions not specified Description The issue is related to a Denial-of-Service condition where the communication protocols and device access lack authentication measures. Remo...
CVE-2021-33541: Allocation of Resources Without Limits or Throttling
Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packets to cause a denial of...
Schneider Electric Triconex TriStation and Tricon Communication Module
1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: Triconex TriStation and Triconex Tricon Communication Module Vulnerabilities: Cleartext Transmission of Sensitive Information, Uncontrolled Resource Consumption,...
The vulnerability of the communication module processors in the SIMATIC S7-300 CPU family and the SINUMERIK 840D controller allows a intruder to trigger a service failure.
The vulnerability of the communication module processors in the SIMATIC S7-300 CPU family and the SINUMERIK 840D controller is related to uncontrolled resource consumption exhaustion. Exploiting this vulnerability can allow an attacker to trigger a service failure through specially created packet...
Siemens SIMATIC TDC CP51M1 6DD1661-0AE1 Communication Module Detection
Binary data 765351.prm...
Siemens SIMATIC RF185C 6GT2002-0JE10 RFID Communication Module Detection
Binary data 765320.prm...
Siemens SIMATIC RF188C 6GT2002-0JE40 RFID Communication Module Detection
Binary data 765322.prm...
Siemens SIMATIC RF186C 6GT2002-0JE20 RFID Communication Module Detection
Binary data 765321.prm...
Information disclosure
A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when using specific Modbus services provided by the REST API of the controller/communication module...
CVE-2019-6850
The CVE-2019-6850 issue affects Schneider Electric Modicon M580 and BMENOC 0311/0321. The vulnerability is an information disclosure (CWE-200) that occurs when reading specific registers via the controller/communication module REST API, allowing exposure of sensitive data. Root cause is informati...
CVE-2019-6848: Improper Handling of Exceptional Conditions
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU BMEx58 and Modicon M580 communication module BMENOC0311, BMENOC0321 see notification for version info, which could cause a Denial of Service attack on the PLC when sending specific data on the REST API...