Lucene search
+L

3729 matches found

Citrix
Citrix
•added 2023/06/01 12:00 a.m.•40 views

Migrate Citrix Virtual Apps and Desktop databases to a new SQL server

Please follow these steps. 1.Close all instances of Citrix studio. Any configuration changes even through powershell to be stopped while following the stepsYou can power down DDCs to be extra cautious Take VM snapshot or take backup of all Delivery Controllers. 2. Take full backup of Site, Monito...

8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2023/05/31 12:00 a.m.•18 views

The vulnerability of the programming software for PLCs (programmable logic controllers), namely EcoStruxure Control Exper, arises from deficiencies in the separation of the controlled system area. This allows a intruder to carry out unauthorized maintenance actions.

The vulnerability of the EcoStruxure Control Exper programming tool for programmable logic controllers is related to deficiencies in the separation of the controlled system area. Exploiting this vulnerability could allow a malicious actor to perform a service failure remotely...

5.5CVSS5.9AI score0.00146EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/05/31 12:00 a.m.•17 views

The vulnerability of the Modbus TCP protocol implementation in Schneider Electric Modicon programmable logic controllers allows a intruder to trigger a service failure.

The vulnerability of the Modbus TCP protocol implementation in Schneider Electric Modicon programmable logic controllers is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the service operation...

7.8CVSS7.2AI score0.00621EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/05/29 12:00 a.m.•19 views

The vulnerability of the PMBus interface of the VRM Voltage Regulator Module in Supermicro BMC controllers allows a hacker to physically destroy the CPU without the ability to restore it later.

The vulnerability of the PMBus interface of the VRM Voltage Regulator Module in Supermicro BMC controllers is related to the improper assignment of permissions for the critical resource. Exploiting this vulnerability may allow an attacker to physically disable the CPU without the possibility of...

7.1CVSS5.9AI score0.00151EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2023/05/24 12:00 a.m.•17 views

The vulnerability of microprogrammed software in Mitsubishi Electric Corporation’s MELSEC iQ-F Series programmable logic controllers arises from buffer overflow on the stack, allowing an intruder to trigger a malfunction or execute arbitrary code.

The vulnerability of microprogrammed software in Mitsubishi Electric Corporation’s MELSEC iQ-F series programmable logic controllers arises due to buffer overflow on the stack. Exploiting this vulnerability allows a remote attacker to cause malfunctions in the system or execute arbitrary code by...

10CVSS8.3AI score0.0344EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/05/24 12:00 a.m.•15 views

The vulnerability of the Codesys software suite for industrial automation integrated into Schneider Electric’s programmable logic controllers allows a perpetrator to compromise data integrity.

The vulnerability of the Codesys software suite for industrial automation integrated into Schneider Electric’s programmable logic controllers is related to the disclosure of information in the incorrect data field. Exploiting this vulnerability could allow a malicious actor to compromise the...

7.7CVSS5.5AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/05/24 12:00 a.m.•18 views

The vulnerability of Rockwell Automation’s distributed controller software ArmorStart ST, related to deficiencies in input data validation by users, allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST distributed controllers is related to deficiencies in the validation of user-input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks remotely...

6.5CVSS6.3AI score0.0062EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/05/22 12:00 a.m.•14 views

The vulnerability of the microprogramming software of Schneider Electric’s programmable logic controllers Modicon M340, Modicon Quantum, and Modicon Premium allows a intruder to gain access to confidential data.

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium is related to the falsification of inter-site requests. Exploiting this vulnerability can allow a remote attacker to gain access to...

7.1CVSS7.7AI score0.00358EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/05/22 12:00 a.m.•21 views

The vulnerability of the microprogramming software of Modicon PAC controllers and PLCs included in EcoStruxure Control Expert and EcoStruxure Process Expert allows a intruder to trigger maintenance failures.

The vulnerability of the microprogramming software of Modicon PAC controllers and PLCs included in EcoStruxure Control Expert and EcoStruxure Process Expert lies in the storage of data beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to trigger service...

6.8CVSS7.1AI score0.00839EPSS
SaveExploits0References3Affected Software3
CNNVD
CNNVD
•added 2023/05/15 12:00 a.m.•23 views

3s-smart Software Solutions CODESYS Development System 加密问题漏洞

3s-smart Software Solutions CODESYS Development System is a suite of programming tools for use in the field of industrial controllers and automation technology from 3s-smart Software Solutions GmbH 3s-smart Software Solutions of Germany. The 3s-smart Software Solutions CODESYS Development System...

7.7CVSS7.7AI score0.00083EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/05/11 12:00 a.m.•20 views

The vulnerabilities of microprogrammed software in Nexx Garage Door Controllers (NXG-100B, NXG-200), Nexx Smart Plugs (NXPG-100W), and Nexx Smart Alarms (NXAL-100) stem from authentication procedures that have flaws. This allows intruders to register a signal that has already been registered by the device.

The vulnerabilities of the microprogrammed software of the Nexx Garage Door Controller NXG-100B, NXG-200, Nexx Smart Plug NXPG-100W, and Nexx Smart Alarm NXAL-100 are related to deficiencies in authentication procedures. Exploiting these vulnerabilities could allow an attacker, operating remotely...

7.5CVSS5.7AI score0.00517EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/05/09 12:00 a.m.•25 views

Siemens SIMATIC Cloud Connect安全漏洞

SIMATIC Cloud Connect 7 is an IoT gateway for connecting programmable logic controllers to cloud services and allows field devices with OPC UA server interfaces to be connected as OPC UA clients. A denial of service vulnerability exists in Siemens SIMATIC Cloud Connect 7, which can be exploited b...

7.5CVSS6.7AI score0.00551EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/05/04 12:00 a.m.•16 views

The vulnerability of the programming software for PLCs (programmable logic controllers), EcoStruxure Control Exper, allows a intruder to execute arbitrary code.

The vulnerability of the EcoStruxure Control Exper programming tool for programmable logic controllers is related to deficiencies in the separation of the controlled system area. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8AI score0.00845EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/04/27 12:00 a.m.•18 views

The vulnerability of microprogrammed software in logic controllers for building and facility control systems from Schneider Electric—such as spaceLYnk, Wiser for KNX (formerly homeLYnk), and FellerLYnk—is related to the lack of authentication for critical functions. This allows attackers to alter the configuration of the system.

The vulnerability of microprogramming software for logic controllers used in building and facility management systems from Schneider Electric—such as spaceLYnk, Wiser for KNX formerly homeLYnk, and FellerLYnk—is related to the absence of authentication for critical functions. Exploiting this...

9.4CVSS5.9AI score0.00793EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
•added 2023/04/25 12:00 a.m.•18 views

The vulnerability of Omron CS/CJ automation controllers, related to the lack of authentication for critical functions, allows attackers to gain access to protected information.

The vulnerability of Omron CS/CJ automation controllers lies in the lack of authentication for critical functions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

7.8CVSS7.2AI score0.00536EPSS
SaveExploits0References3
CNVD
CNVD
•added 2023/04/21 12:00 a.m.•69 views

Schneider Electric Easergy Builder Code Issue Vulnerability

Schneider Electric Easergy Builder is a set of configuration software for Easergy remote terminal units and controllers from Schneider Electric, France. A code issue vulnerability exists in Schneider Electric Easergy Builder version 1.7.23 and earlier, which stems from the presence of an...

6.7CVSS7.6AI score0.00188EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2023/04/13 12:00 a.m.•37 views

FANUC Robot Controllers Integer Coercion Error (CVE-2021-32996)

The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to crash. A restart is required. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable,...

7.8CVSS7.4AI score0.01057EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/04/13 12:00 a.m.•34 views

FANUC Robot Controllers Out-of-Bounds Write (CVE-2021-32998)

The FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code. INIT START/restore from backup required. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mo...

8.8CVSS7.4AI score0.01183EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
•added 2023/04/11 7:00 a.m.•403 views

April 11, 2023—KB5025230 (OS Build 20348.1668)

None None...

9.8CVSS6.9AI score0.95454EPSS
SaveExploits31
Prion
Prion
•added 2023/04/07 3:15 a.m.•17 views

Remote code execution

codefever before 2023.2.7-commit-b1c2e7f was discovered to contain a remote code execution RCE vulnerability via the component /controllers/api/user.php...

6.5CVSS9AI score0.01502EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder