Lucene search
K

162 matches found

Positive Technologies
Positive Technologies
added 2023/06/26 12:0 a.m.2 views

PT-2023-13738 · Tenda · Tenda Ac6 Ac1200 Smart Dual-Band Wifi Router

Name of the Vulnerable Software and Affected Versions: Tenda AC6 AC1200 Smart Dual-Band WiFi Router version 15.03.06.50 multi Description: A cross-site scripting XSS issue was found in the Parental Control module, specifically via the deviceId parameter. This allows for potential malicious script...

5.4CVSS5.2AI score0.00415EPSS
Exploits2References4
CNNVD
CNNVD
added 2023/05/09 12:0 a.m.2 views

UNISOC Chipsets 缓冲区错误漏洞

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC Chipsets modem control device module, which stems from a lack of boundary checking, resulting in out-of-bounds writes...

4.4CVSS5.1AI score0.00118EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/05/09 12:0 a.m.2 views

UNISOC Chipsets 缓冲区错误漏洞

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC Chipsets modem control device module, which stems from a lack of boundary checking, resulting in out-of-bounds writes...

4.4CVSS5.1AI score0.00121EPSS
Exploits0References3
OSV
OSV
added 2022/07/15 12:15 p.m.2 views

CVE-2022-30244

Honeywell Alerton Ascent Control Module ACM through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be store on the controller and then run without verification. A user with malicious intent can send a crafted packet to change and/or stop the program...

8CVSS5.8AI score0.01151EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2022/07/15 12:15 p.m.1 views

CVE-2022-30244

Honeywell Alerton Ascent Control Module ACM through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be store on the controller and then run without verification. A user with malicious intent can send a crafted packet to change and/or stop the program...

8CVSS7.4AI score0.01151EPSS
Exploits0References4
CVE
CVE
added 2022/07/15 11:40 a.m.50 views

CVE-2022-30242

Honeywell Alerton Ascent Control Module (ACM) up to 2022-05-04 is affected by CVE-2022-30242, allowing unauthenticated configuration changes from remote users. The root issue is unprotected remote configuration access that can store altered configuration on the controller and implement it, creati...

6.8CVSS6.4AI score0.0097EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2022/07/15 12:0 a.m.4 views

Honeywell Alerton Ascent Control Module 安全漏洞

The Honeywell Alerton Ascent Control Module is a high performance, BACnet-compliant, integrated building controller and router from USAHoneywell. It can support BACnet/Ethernet, BACnet/IP and BACnet/MSTP. A security vulnerability exists in Honeywell Alerton Ascent Control Module ACM version...

6.8CVSS6.7AI score0.0097EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/07/15 12:0 a.m.3 views

Honeywell Alerton Ascent Control Module 安全漏洞

The Honeywell Alerton Ascent Control Module is a high performance, BACnet-compliant, integrated building controller and router from USAHoneywell. It can support BACnet/Ethernet, BACnet/IP and BACnet/MSTP. A security vulnerability exists in Honeywell Alerton Ascent Control Module ACM versions...

8CVSS7.7AI score0.01151EPSS
Exploits0References4
OSV
OSV
added 2020/11/30 10:15 p.m.1 views

CVE-2020-29439

Tesla Model X vehicles before 2020-11-23 have key fobs that rely on five VIN digits for the authentication needed for a body control module BCM to initiate a Bluetooth wake-up action. The full VIN is visible from outside the vehicle...

4.6CVSS5.8AI score0.00409EPSS
Exploits1References1
Prion
Prion
added 2020/11/30 10:15 p.m.15 views

Code injection

Tesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt to pair a new key fob with the body control module BCM. This allows an attacker who is inside a vehicle, or is otherwise able to send data over the CAN bus to start and drive the vehicle with a spoofe...

2.1CVSS4.8AI score0.0021EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2020/11/30 9:23 p.m.72 views

CVE-2020-29440

Tesla Model X vehicles before 2020-11-23 are affected by CVE-2020-29440, where the system does not perform certificate validation when pairing a new key fob with the Body Control Module (BCM). This allows an attacker who is inside the vehicle or can send data over the CAN bus to start and drive t...

4.6CVSS4.7AI score0.0021EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2020/11/30 12:0 a.m.5 views

Tesla Model X Security Breach

Tesla The Tesla Model X is a new energy vehicle from the American company Tesla. A security vulnerability exists in versions of Tesla Model X vehicles prior to 2020-11-23, which stems from the fact that its key fobs rely on 5 VIN digits for authentication, and the Body Control Module BCM is...

4.6CVSS5.8AI score0.00409EPSS
Exploits1References2
CNNVD
CNNVD
added 2020/11/30 12:0 a.m.3 views

Tesla Model X Trust Management Issues Vulnerabilities

Tesla Tesla Model X is a new energy vehicle from Tesla Inc. in the United States. A security vulnerability exists in versions of Tesla Model X vehicles prior to 2020-11-23, which stems from a certificate validation not being performed when attempting to pair a new keycard with the Body Control...

4.6CVSS5.8AI score0.0021EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2020/06/10 12:0 a.m.5 views

The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 (HU250) automation systems in transformer substations stems from the lack of protection for operational data. This allows a malicious individual to compromise the closed keys used by the device.

The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 HU250 automation systems in transformer substations is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to compromise the closed keys...

8.6CVSS7.2AI score0.01378EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/10 12:0 a.m.2 views

The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 (HU250) automation systems for transformer substations involves insecure management of privileges. This allows attackers to escalate their privileges and perform arbitrary file writing and deletion operations on the device.

The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 HU250 automation systems for transformer substations is related to insecure privilege management. Exploiting this vulnerability allows an attacker to escalate their privileges and perform arbitrar...

9CVSS7.2AI score0.0119EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/10 12:0 a.m.1 views

The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 (HU250) automation systems, related to the use of vulnerable external software, allows attackers to carry out various attacks on these components.

The vulnerability of the microprogramming software of the modular controller for the automation of transformer substations of Schneider Electric Easergy T300 HU250 is related to the use of a vulnerable external software. Exploiting this vulnerability allows a malicious actor to carry out various...

7.8CVSS7.8AI score0.01433EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/03/26 12:0 a.m.1 views

The vulnerability of the HTTP(S) software control modules of Belden Hirschmann HiOS and Belden Hirschmann HiSecOS allows a perpetrator to gain unauthorized access to confidential information.

The vulnerability of the HTTPS software control modules of Belden Hirschmann HiOS and Belden Hirschmann HiSecOS relates to errors in handling authentication requests. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to sensitive information through specially...

8.1CVSS5.5AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.9 views

Omron CS1W-PTS12 Temperature Control Module Detection

Binary data 756115.prm...

7.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.9 views

Omron CS1W-PTS02 Temperature Control Module Detection

Binary data 756118.prm...

7.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.9 views

Omron CJ1W-TC102 Temperature Control Module Detection

Binary data 755992.prm...

7.3AI score
Exploits0
Rows per page
Query Builder