Design/Logic Flaw

On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges...

CVE-2021-21000: Allocation of Resources Without Limits or Throttling

On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime...

lldp/openvswitch: denial of service via externally triggered memory leak

A flaw was found in multiple versions of Open vSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially causing a denial of service. The highest threat from this vulnerability is to system availability...

CVE-2021-21000

On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime...

CVE-2021-21001

On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges...

CVE-2021-20589

Buffer access with incorrect length value vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.38.000, GT25 model communication driver versions 01.19.000 through 01.38.000, GT23 model communication driver versions 01.19.000 through 01.38.000 and GT21 model...

Cisco NX-OS Software Unidirectional Link Detection DoS / Code Execution (cisco-sa-nxos-udld-rce-xetH6w35)

An arbitrary code execution or denial of service DoS vulnerability exists in Unidirectional Link Detection UDLD feature of Cisco NX-OS Software due to insufficient input validation. An unauthenticated, adjacent attacker can exploit this issue by sending crafted Cisco UDLD protocol packets to a...

MikroTik RouterOS Assertion Failure Vulnerability

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. MikroTik RouterOS suffers from an assertion failure vulnerability in the btest process. An authenticated, remote...

WAGO Unauthorized Access Vulnerability

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed specifically for applications in industrial environments where digital algorithms operate electronic systems. A security vulnerability exists in WAGO. The vulnerability arises from unauthorized acces...

CVE-2021-20998

In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users...

Authorization

In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users...

CVE-2021-20998 WAGO: Managed Switches: Unauthorized creation of user accounts

In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users...

PT-2021-14327

Name of the Vulnerable Software and Affected Versions: WAGO managed switches affected versions not specified Description: The issue allows creation of users without authorization in multiple managed switches by WAGO, using specially crafted packets. Recommendations: At the moment, there is no...

CVE-2021-20998: Missing Authentication for Critical Function

In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users...

CVE-2019-19276

A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation incl. SIPLUS variants All versions V16 Update 4, SIMATIC HMI KTP Mobile Panels All versions V16 Update 4. Specially crafted packets sent to port 161/udp can cause the SNMP service of affected devices to crash. A manu...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation incl. SIPLUS variants All versions V16 Update 4, SIMATIC HMI KTP Mobile Panels All versions V16 Update 4. Specially crafted packets sent to port 161/udp can cause the SNMP service of affected devices to crash. A manu...

Mikrotik RouterOs Memory Corruption Vulnerability (CNVD-2021-49782)

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. MikroTik RouterOS has a memory corruption vulnerability in the /ram/pckg/wireless/nova/bin/wireless process. An...

多款 Siemens 设备缓冲区错误漏洞

Siemens SIMATIC is a configuration software from Siemens. A denial of service vulnerability exists in multiple Siemens products. The vulnerability originates from specially crafted packets sent to port 161/UDP and can be exploited by an attacker to cause the SNMP service on the affected device to...

多款 Siemens 设备资源管理错误漏洞

Siemens SIMATIC is a Siemens Siemens configuration software. A resource management error vulnerability exists in multiple Siemens devices. An attacker could send specially crafted packets that would result in a denial of service condition on TCP port 102. The following products and versions are...

CVE-2021-27573

An issue was discovered in Emote Remote Mouse through 4.0.0.0. Remote unauthenticated users can execute arbitrary code via crafted UDP packets with no prior authorization or authentication...