PT-2022-4135

Name of the Vulnerable Software and Affected Versions Connected Components Workbench CCW affected versions not specified Safety Instrumented Systems Workstation SISW affected versions not specified ISaGRAF Workbench affected versions not specified Description The issue is related to an XML extern...

CVE-2022-25826

Information Exposure vulnerability in Galaxy S3 Plugin prior to version 2.2.03.22012751 allows attacker to access password information of connected WiFiAp in the log...

CVE-2022-25827

Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.22012751 allows attacker to access password information of connected WiFiAp in the log...

CVE-2022-25826

Information Exposure vulnerability in Galaxy S3 Plugin prior to version 2.2.03.22012751 allows attacker to access password information of connected WiFiAp in the log...

CVE-2022-22511

Various configuration pages of the device are vulnerable to reflected XSS Cross-Site Scripting attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised...

Novel Attack Turns Amazon Devices Against Themselves

UPDATE Researchers from the University of London and the University of Catania have discovered how to weaponize Amazon Echo devices to hack themselves. The – dubbed “Alexa vs. Alexa” – leverages what the researchers called “a command self-issue vulnerability”: using pre-recorded messages which,...

WordPress Connected Sermons plugin <= 1.2.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Connected Sermons plugin versions = 1.2.1. Solution No patched version available...

GSD-2022-1000545 vsock: remove vsock from connected table when connect is interrupted by a signal

vsock: remove vsock from connected table when connect is interrupted by a signal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.11 by...

GSD-2022-1000459 vsock: remove vsock from connected table when connect is interrupted by a signal

vsock: remove vsock from connected table when connect is interrupted by a signal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.25 by...

GSD-2022-1000394 vsock: remove vsock from connected table when connect is interrupted by a signal

vsock: remove vsock from connected table when connect is interrupted by a signal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.102 by...

GSD-2022-1000347 vsock: remove vsock from connected table when connect is interrupted by a signal

vsock: remove vsock from connected table when connect is interrupted by a signal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.181 by...

GSD-2022-1000324 vsock: remove vsock from connected table when connect is interrupted by a signal

vsock: remove vsock from connected table when connect is interrupted by a signal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.231 by...

GSD-2022-1000293 vsock: remove vsock from connected table when connect is interrupted by a signal

vsock: remove vsock from connected table when connect is interrupted by a signal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.303 by...

PT-2022-28567

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.303 Description The issue concerns the removal of vsock from the connected table when a connect operation is interrupted by a signal. The actual impact and attack plausibility have not yet been proven...

PT-2022-28598

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.231 Description The issue concerns the removal of vsock from the connected table when a connect operation is interrupted by a signal. The actual impact and attack plausibility have not yet been proven...

PT-2022-28819

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.9 through 5.16.10 Description The issue is related to the removal of vsock from the connected table when a connect operation is interrupted by a signal. The actual impact and attack plausibility have not yet been proven...

CVE-2021-3773

A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks...

CVE-2021-3773: Exposure of Sensitive Information to an Unauthorized Actor

A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks...

Rockwell (CVE-2017-5176) (deprecated)

This plugin has been deprecated as Rockwell Automation Connected Components Workbench is not supported. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled...

CISA Warns of Critical Vulnerabilities Discovered in Airspan Networks Mimosa

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday published an Industrial Controls Systems Advisory ICSA warning of multiple vulnerabilities in the Airspan Networks Mimosa equipment that could be abused to gain remote code execution, create a denial-of-service DoS...