47 matches found
The software vulnerability is designed for calculating and selecting control devices for ProClima temperature settings. It involves the operation of data beyond the buffer in memory, allowing a hacker to execute arbitrary code.
The vulnerability of the software is designed for calculating and selecting devices that can control the temperature settings of ProClima. This vulnerability is related to the operation of the function that goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker t...
Critical Flaws Affect Embedded TCP/IP Stack Widely Used in Industrial Control Devices
Cybersecurity researchers on Wednesday disclosed 14 vulnerabilities affecting a commonly-used TCP/IP stack used in millions of Operational Technology OT devices manufactured by no fewer than 200 vendors and deployed in manufacturing plants, power generation, water treatment, and critical...
Phoenix Contact PLCnext Control Devices Cross-Site Scripting Vulnerability
Phoenix Contact PLCnext Control Devices is a programmable logic controller for industrial environments from Phoenix Contact. A cross-site scripting vulnerability exists in Phoenix Contact PLCnext Control Devices prior to version 2021.0 LTS, which originates from an authenticated, low-privileged...
CVE-2020-12521
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot...
CVE-2020-12518
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks...
CVE-2020-12517
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website local privilege escalation...
Design/Logic Flaw
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot...
Privilege escalation
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website local privilege escalation...
Information disclosure
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks...
CVE-2020-12517
Summary: Phoenix Contact PLCnext Control Devices (prior to 2021.0 LTS) are affected by a cross-site scripting vulnerability. An authenticated, low-privileged user can embed malicious JavaScript that executes when an administrator visits the vulnerable web interface, leading to local privilege esc...
CVE-2020-12518
CVE-2020-12518 affects Phoenix Contact PLCnext Control Devices released before 2021.0 LTS. The vulnerability is an information disclosure flaw where an attacker can read insufficiently protected sensitive information to plan further attacks. The CVSS metrics indicate partial confidentiality impac...
CVE-2020-12521 Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: A specially crafted LLDP packet may lead to a high system load in the PROFINET stack.
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot...
CVE-2020-12519
CVE-2020-12519 affects Phoenix Contact PLCnext Control Devices prior to 2021.0 LTS. The vulnerability allows an attacker to open a reverse shell with root privileges. The provided sources confirm this impact but do not specify the root-cause details or a patched version within the connected docum...
CVE-2020-12521
CVE-2020-12521 concerns Phoenix Contact PLCnext Control Devices (pre-2021.0 LTS). A specially crafted LLDP packet can cause a high load in the PROFINET stack, potentially leading to system service failures or a complete reboot. The vulnerability is described across multiple sources as an input va...
CVE-2020-12519 Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use this vulnerability i.e. to open a reverse shell with root privileges.
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e. to open a reverse shell with root privileges...
CVE-2020-12517 Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website (local privilege escalation).
On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an authenticated low privileged user could embed malicious Javascript code to gain admin rights when the admin user visits the vulnerable website local privilege escalation...
Phoenix Contact PLCnext Control Devices 跨站脚本漏洞
Phoenix Contact PLCnext Control Devices is a programmable logic controller for industrial environments from Phoenix Contact. A cross-site scripting vulnerability exists in Phoenix Contact PLCnext Control Devices prior to version 2021.0 LTS, which originates from an authenticated, low-privileged...
The vulnerabilities of BIG-IP and BIG-IQ access control and remote authentication mechanisms, related to access control errors, allow attackers to escalate their privileges.
The vulnerability of BIG-IP Access Policy Manager and BIG-IQ access control devices lies in access control errors. Exploiting this vulnerability can allow attackers to increase their privileges...