Lucene search
+L

2956 matches found

Vulnrichment
Vulnrichment
added 2022/07/04 1:51 a.m.11 views

CVE-2022-34151

Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac...

7.3AI score0.0142EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/04 12:00 a.m.9 views

多款Omron产品安全漏洞

Omron Machine automation controller NX7 series and so on are the products of Omron Corporation of Japan.Omron Machine automation controller NX7 series is a series of machine automation controllers.Omron Machine Omron Machine automation controller NX1 series is a series of machine automation...

8.1CVSS8AI score0.01819EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/07/04 12:00 a.m.7 views

多款Omron产品信任管理问题漏洞

Omron Machine automation controller NX7 series and so on are the products of Omron Corporation of Japan.Omron Machine automation controller NX7 series is a series of machine automation controllers.Omron Machine Omron Machine automation controller NX1 series is a series of machine automation...

8.1CVSS7.9AI score0.0142EPSS
SaveExploits0References5
CNVD
CNVD
added 2022/06/30 12:00 a.m.82 views

Multiple Dahua Products Denial of Service Vulnerabilities

Dahua IPC-HFW2XXX is a series of IP cameras, Dahua IPC-HDBW2XXX is a series of cameras, Dahua ASI7XXXX is a series of face recognition access controllers, and Dahua IPC-HFW2XXX is a series of IP cameras. A denial of service vulnerability exists in several Dahua products, which could be exploited ...

7.4CVSS3.9AI score0.00826EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:00 a.m.13 views

The vulnerability of the Wiser Smart programmable logic controllers from Schneider Electric, Wiser Controller EER21000 and Wiser Controller EER21001, arises from the use of rigidly encrypted account data. This allows a intruder to execute arbitrary codes.

The vulnerability of the Wiser Smart programmable logic controllers from Schneider Electric, Wiser Controller EER21000 and Wiser Controller EER21001, lies in the use of strictly encrypted user credentials. Exploiting this vulnerability could allow an attacker to execute arbitrary codes remotely...

9.7CVSS8.1AI score0.01147EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:00 a.m.12 views

The vulnerability of HID Mercury programmable logic controllers’ microprogramming software, related to security mechanism failures, allows a intruder to alter the “notes” section on the web interface’s home page.

The vulnerability of HID Mercury programmable logic controllers’ microprogramming software is related to security mechanism errors. Exploiting this vulnerability could allow a malicious actor to modify the “notes” section on the web interface’s home page using a specially created package...

5.3CVSS6.2AI score0.00814EPSS
SaveExploits0References7Affected Software9
ATTACKERKB
ATTACKERKB
added 2022/06/28 1:15 p.m.5 views

CVE-2022-29519

Cleartext transmission of sensitive information vulnerability exists in STARDOM FCN Controller and FCJ Controller R1.01 to R4.31, which may allow an adjacent attacker to login the affected products and alter device configuration settings or tamper with device firmware...

7.9CVSS7.1AI score0.00377EPSS
SaveExploits0References5
Prion
Prion
added 2022/06/28 1:15 p.m.25 views

Hardcoded credentials

Use of hard-coded credentials vulnerability exists in STARDOM FCN Controller and FCJ Controller R4.10 to R4.31, which may allow an attacker with an administrative privilege to read/change configuration settings or update the controller with tampered firmware...

9CVSS7.1AI score0.01511EPSS
SaveExploits0References4Affected Software2
Prion
Prion
added 2022/06/28 1:15 p.m.26 views

Design/Logic Flaw

Cleartext transmission of sensitive information vulnerability exists in STARDOM FCN Controller and FCJ Controller R1.01 to R4.31, which may allow an adjacent attacker to login the affected products and alter device configuration settings or tamper with device firmware...

7.9CVSS7.3AI score0.00377EPSS
SaveExploits0References4Affected Software2
Cvelist
Cvelist
added 2022/06/28 10:05 a.m.39 views

CVE-2022-29519

Cleartext transmission of sensitive information vulnerability exists in STARDOM FCN Controller and FCJ Controller R1.01 to R4.31, which may allow an adjacent attacker to login the affected products and alter device configuration settings or tamper with device firmware...

7.5AI score0.00377EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/06/28 12:00 a.m.14 views

The vulnerability of embedded images of PACsystems programmable logic controllers allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of embedded images of PACsystems programmable logic controllers is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data, compromise its integrity, and even cause...

10CVSS5.5AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/28 12:00 a.m.9 views

The vulnerability of the implementation of the ROC protocol for microprogrammed logic controllers FloBoss allows a intruder to gain unauthorized access to protected information.

The vulnerability of the ROC protocol implementation in FloBoss microprogrammed logic controllers is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

7.8CVSS5.5AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/28 12:00 a.m.12 views

The vulnerability of the implementation of the Safety Builder protocol for Safety Manager controller devices allows a intruder to execute arbitrary code.

The vulnerability of the implementation of the Safety Builder protocol for Safety Manager controllers is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code...

10CVSS5.8AI score0.00913EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/28 12:00 a.m.10 views

The vulnerability of the BSAP/IP protocol implementation of the telemechanics controller ControlWave and the Bristol Babcock 33xx controller allows a perpetrator to disclose protected information.

The vulnerability of the BSAP/IP protocol implementation of the telemechanics controller ControlWave and the Bristol Babcock 33xx controller is related to insufficient encryption strength. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

7.8CVSS5.5AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/28 12:00 a.m.14 views

The vulnerability of microprogrammed software in PACsystems programmable logic controllers, related to insufficient verification of data authenticity, allows a intruder to execute arbitrary code.

The vulnerability of microprogrammed programmable logic controllers from PACsystems is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary code using a specially crafted file written in...

10CVSS6AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/28 12:00 a.m.13 views

The vulnerability of the implementation of the SRTP protocol in microprogrammed software for programmable logic controllers PACsystems allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SRTP protocol implementation in PACsystems microprogrammed logic controllers involves the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

7.8CVSS5.5AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/28 12:00 a.m.10 views

The vulnerability of the BSAP/IP protocol implementation of the telemechanics controller ControlWave and the Bristol Babcock 33xx controller allows a perpetrator to disclose protected information.

The vulnerability of the BSAP/IP protocol implementation of the telemechanics controller ControlWave and the Bristol Babcock 33xx controller is related to the transmission of critical information in open text. Exploiting this vulnerability can allow a malicious actor to disclose the protected...

7.8CVSS5.5AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/28 12:00 a.m.22 views

The vulnerabilities of embedded images of microprogrammed control systems for DeltaV M-series/S-series/P-series controllers, as well as the DeltaV/Ovation SIS emergency protection system, allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of embedded images of microprogrammed control systems for DeltaV M-series/S-series/P-series controllers, as well as of the emergency protection system DeltaV/Ovation SIS, is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a maliciou...

7.8CVSS5.5AI score0.00149EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/28 12:00 a.m.13 views

The vulnerability of the Honeywell Modbus TCP protocol and the Safety Builder controller devices for emergency protection systems like Safety Manager, as well as the micro-programmed software for programmable logic controllers like Honeywell Experion PKS, allows a intruder to alter the device’s configuration.

The vulnerability of Honeywell Modbus TCP and Safety Builder controllers’ anti-disaster protection devices, such as Safety Manager and Honeywell Experion PKS programmable logic controllers, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an...

7.8CVSS5.5AI score0.00872EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/27 11:09 p.m.19 views

CVE-2022-34134

Jorani v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /application/controllers/Users.php...

7.1AI score
SaveExploits0References4
Rows per page
Query Builder