Remote Control Vulnerability in Hologic PLC LE5109L

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A remote control vulnerability exists in the Hologic PLC LE5109L, which can be exploited by an attacker to cause all output points of the PLC to go out by sending constructed packets that...

CVE-2018-11456

A vulnerability has been identified in Automation License Manager 5 All versions 5.3.4.4. An attacker with network access to the device could send specially crafted network packets to determine whether or not a network port on another remote system is accessible or not. This allows the attacker t...

CVE-2018-11456

Siemens Automation License Manager (ALM) 5.x prior to 5.3.4.4 contains a network-based information-disclosure/port-scanning flaw. An unauthenticated, remote attacker could send crafted packets to determine whether a remote port is reachable, enabling basic port discovery using the victim’s machin...

Security Bulletin: OpenSSL security vulnerability affects z/TPF (CVE-2016-8610)

Summary The "SSL Death Alert" vulnerability for OpenSSL affects z/TPF. Vulnerability Details CVEID: CVE-2016-8610 DESCRIPTION: SSL/TLS protocol is vulnerable to a denial of service, caused by an error when processing ALERT packets during a SSL handshake. By sending specially-crafted packets, a...

CVE-2018-11451

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module All versions V4.33, Firmware variant PROFINET IO for EN100 Ethernet module All versions, Firmware variant Modbus TCP for EN100 Ethernet module All versions, Firmware variant DNP3 TCP for EN100 Ethernet...

Design/Logic Flaw

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module All versions V4.33, Firmware variant PROFINET IO for EN100 Ethernet module All versions, Firmware variant Modbus TCP for EN100 Ethernet module All versions, Firmware variant DNP3 TCP for EN100 Ethernet...

Security Bulletin: Vulnerability in IBM Rational ClearCase (GSKit component) with potential for TLS Attack (CVE-2013-0169)

Summary The IBM GSKit component used in Rational ClearCase is susceptible to a Transport Layer Security protocol used in HTTPS vulnerability known as "Lucky Thirteen." The vulnerability might allow remote attackers to conduct distinguishing and plain-text recovery attacks by statistically analyzi...

CVE-2018-3608

A vulnerability in Trend Micro Maximum Security's Consumer 2018 versions 12.0.1191 and below User-Mode Hooking UMH driver could allow an attacker to create a specially crafted packet that could alter a vulnerable system in such a way that malicious code could be injected into other processes...

Siemens SICLOCK TC Product Denial of Service Vulnerability

The SICROCK product line offers components for synchronizing plant and system time. A denial of service vulnerability exists in Siemens SICLOCK TC products. An attacker with network access privileges could cause a denial of service condition by sending certain packets to the device, which could...

DEBIAN-CVE-2018-13112

getl2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packets, as demonstrated by tcpprep...

UBUNTU-CVE-2018-13112

getl2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packets, as demonstrated by tcpprep...

Heap overflow

getl2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packets, as demonstrated by tcpprep...

CVE-2018-13112

getl2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via crafted packets, as demonstrated by tcpprep...

CVE-2018-13112

CVE-2018-13112 affects Tcpreplay (and its tcpprep-related routines) in version 4.3.0 beta1, where the function get_l2len in common/get.c may read beyond a heap boundary when processing crafted packet captures, leading to a denial of service (application crash). Public advisories (Fedora, Ubuntu U...

PT-2018-11608 · Aqua Security +2 · Tcpreplay +2

Name of the Vulnerable Software and Affected Versions: Tcpreplay version 4.3.0 beta1 Description: The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via crafted packets. This can be demonstrated using tcpprep...

Denial of Service Vulnerability in Multiple Cisco Products (CNVD-2018-12392)

Cisco Firepower 4100 Series Next-Generation Firewalls are all products of Cisco Corporation.Cisco Firepower 4100 Series Next-Generation Firewalls is a 4100 series firewall device. Cisco Firepower 4100 Series Next-Generation Firewalls are 4100 series firewalls.MDS 9000 Series Multilayer Switches a...

Input Validation Vulnerability in Multiple Rockwell Automation Products

Rockwell Automation Allen-Bradley Compact GuardLogix 5370 controller and so on are programmable logic controller products of Rockwell Rockwell Automation. An input validation vulnerability exists in several Rockwell Automation products. An attacker could exploit this vulnerability to cause a deni...

CVE-2018-0305

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability exists because the affected software insufficiently validates...

CVE-2018-0310

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to obtain sensitive information from memory or cause a denial of service DoS condition on the affected product. The vulnerability exists because t...

Multiple Cisco Products NX-OS Software SNMP Denial of Service Vulnerabilities

Cisco Nexus 2000 Series Switches are products of Cisco Corporation.Cisco Nexus 2000 Series Switches are switch devices.Fabric Modules are switch matrix modules.NX-OS Software is a set of data center-grade operating system software for the switches.Simple Network Management Protocol SNMP input...