22360 matches found
ABB Cylon FLXeon 9.3.5 (variant.js) Unauthenticated System Information Disclosure
Summary BACnetยฎ Smart Building Controllers. ABB's BACnet portfolio features a series of BACnetยฎ IP and BACnet MS/TP field controllers for ASPECTยฎ and INTEGRAโข building management solutions. ABB BACnet controllers are designed for intelligent control of HVAC equipment such as central plant, boiler...
K000151431: Intel Ethernet Controller and Adapter vulnerability CVE-2024-24983
Security Advisory Description Protection mechanism failure in firmware for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 4.4 may allow an unauthenticated user to potentially enable denial of service via network access. CVE-2024-24983 Impact This vulnerability ma...
USN-7510-5 linux-azure-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Network block device...
USN-7510-3 linux-azure, linux-azure-5.15, linux-nvidia-tegra vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Network block device...
USN-7518-1 linux-azure-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - Block layer subsystem; - Drivers core; - Network block device driver;...
๐ ABB Cylon FLXeon 9.3.5 uukl.js Predictable Salt / Weak Hashing Algorithm
The ABB Cylon FLXeon BACnet controller's /api/uukl.js module implements password verification and update mechanisms using the insecure MD5 hash function alongside weak salt generation via Math.random. This constitutes a cryptographic vulnerability where password hashes are susceptible to collisio...
CLSA-2025-1747688831 kernel: Fix of 20 CVEs
drm/dpmst: Ensure mstprimary pointer is valid in drmdpmsthandleupreq CVE-2024-57798 - block: Fix handling of offline queues in blkmqallocrequesthctx CVE-2022-49720 - drm: nv04: Fix out of bounds access CVE-2024-27008 - parport: Proper fix for array out-of-bounds access CVE-2024-50074 - Bluetooth:...
Astra Linux - ััะทะฒะธะผะพััั ะฒ linux-5.10
The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the...
๐ ABB Cylon FLXeon 9.3.5 siteGuide.js Authenticated Directory Traversal
The ABB Cylon FLXeon BACnet controller is vulnerable to authenticated file traversal via the /api/siteGuide endpoint. An attacker with valid credentials can manipulate the filename parameter to move and access or overwrite arbitrary files. The issue arises due to improper input validation in...
PT-2025-24354
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the CAN broadcast manager CAN BCM. The CAN BCM can send a sequence of CAN frames via hrtimer, and the content and length...
ABB Cylon FLXeon 9.3.5 (siteGuide.js) Authenticated Root Remote Code Execution
Summary BACnetยฎ Smart Building Controllers. ABB's BACnet portfolio features a series of BACnetยฎ IP and BACnet MS/TP field controllers for ASPECTยฎ and INTEGRAโข building management solutions. ABB BACnet controllers are designed for intelligent control of HVAC equipment such as central plant, boiler...
ABB Cylon FLXeon 9.3.5 (siteGuide.js) Authenticated Directory Traversal
Summary BACnetยฎ Smart Building Controllers. ABB's BACnet portfolio features a series of BACnetยฎ IP and BACnet MS/TP field controllers for ASPECTยฎ and INTEGRAโข building management solutions. ABB BACnet controllers are designed for intelligent control of HVAC equipment such as central plant, boiler...
๐ ABB Cylon FLXeon 9.3.5 bbmdList.js Authenticated Configuration Poisoning
The ABB Cylon FLXeon BACnet controller suffers from a configuration poisoning vulnerability in the put function of bbmdList.js, where the writeFile function is invoked to persist user-controlled data req.body.bipList and req.body.natList directly into sensitive configuration files /etc/bdt.txt an...
๐ HP Sure Access Enterprise / Sure Click Enterprise Missing Authentication
SEC Consult conducted penetration tests on Sure Access in 2022 and on Sure Click in 2023 and established a contact with HP afterwards. After several rounds of emails and meetings with the product development team, the scope and limitations of Sure Access and Sure Click were made clear. This...
๐ ABB Cylon FLXeon 9.3.5 siteGuide.js Authenticated Root Remote Code Execution
The ABB Cylon FLXeon BACnet controller is vulnerable to authenticated remote root code execution via the /api/siteGuide endpoint. An attacker with valid credentials can inject arbitrary system commands by manipulating the filename and/or originalname parameters. The issue arises due to improper...
The vulnerability of the Microprogrammed Servo Device Software of Kinetix 5700 A, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.
The vulnerability of the Kinetix 5700 A servo-controllerโs microprogramming software is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
ABB Cylon FLXeon 9.3.5 (capture.js) Authenticated File Disclosure/Delete
Summary BACnetยฎ Smart Building Controllers. ABB's BACnet portfolio features a series of BACnetยฎ IP and BACnet MS/TP field controllers for ASPECTยฎ and INTEGRAโข building management solutions. ABB BACnet controllers are designed for intelligent control of HVAC equipment such as central plant, boiler...
ABB Cylon FLXeon 9.3.5 (bbmdList.js) Authenticated Config Poisoning
Summary BACnetยฎ Smart Building Controllers. ABB's BACnet portfolio features a series of BACnetยฎ IP and BACnet MS/TP field controllers for ASPECTยฎ and INTEGRAโข building management solutions. ABB BACnet controllers are designed for intelligent control of HVAC equipment such as central plant, boiler...
CVE-2024-53827
Ericsson Packet Core Controller PCC contains a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degradation...
The vulnerability in the web interface of the Cisco Application Policy Infrastructure Controller allows attackers to perform cross-site scripting (XSS) attacks.
The vulnerability of the Cisco Application Policy Infrastructure Controller web interface relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...