82 matches found
Wireshark 3.2.x < 3.2.15 A Vulnerability (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.2.15. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.2.15 advisory. - Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet...
dnp.go.th Improper Access Control vulnerability OBB-1370025
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Rockwell Automation Micrologix 1400 <= 21.2 Exploitable Access Control
Binary data 720215.prm...
sinergia.dnp.gov.co XSS vulnerability
Open Bug Bounty ID: OBB-660799 Description| Value ---|--- Affected Website:| sinergia.dnp.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-14462
CVE-2017-14462 affects Allen-Bradley MicroLogix 1400 Series B FRN 21.2 and earlier. The issue is an improper access-control in data, program, and function file permissions that lets unauthenticated, remote attackers send crafted packets to read/write files, disclose sensitive information, modify ...
Debian DSA-3516-1 : wireshark - security update
Multiple vulnerabilities were discovered in the dissectors/parsers for DNP, RSL, LLRP, GSM A-bis OML, ASN 1 BER which could result in denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...
[SECURITY] [DSA 3516-1] wireshark security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3516-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 13, 2016 https://www.debian.org/security/faq -...
DSA-3516-1 wireshark - security update
Bulletin has no description...
Wireshark 2.0.x < 2.0.2 Multiple Vulnerabilities (Mac OS X)
The version of Wireshark installed on the remote Mac OS X host is 2.0.x prior to 2.0.2. It is, therefore, affected by multiple vulnerabilities in the following components, which can result in a memory disclosure, a denial of service, or the execution of arbitrary code : - 3GPP TS 32.423 Trace fil...
Wireshark 2.0.x < 2.0.2 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is 2.0.x prior to 2.0.2. It is, therefore, affected by multiple vulnerabilities in the following components, which can result in a memory disclosure, a denial of service, or the execution of arbitrary code : - 3GPP TS 32.423 Trace file...
Wireshark 1.12.x < 1.12.10 Multiple Vulnerabilities (Mac OS X)
The version of Wireshark installed on the remote Mac OS X host is 1.12.x prior to 1.12.10. It is, therefore, affected by multiple vulnerabilities in the following components, which can result in a memory disclosure or a denial of service : - ASN.1 BER dissector - DNP dissector - GSM A-bis OML...
Mageia: Security Advisory (MGASA-2016-0091)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD : wireshark -- multiple vulnerabilities (45117749-df55-11e5-b2bd-002590263bf5)
Wireshark development team reports : The following vulnerabilities have been fixed : - wnpa-sec-2016-02 ASN.1 BER dissector crash. Bug 11828 CVE-2016-2522 - wnpa-sec-2016-03 DNP dissector infinite loop. Bug 11938 CVE-2016-2523 - wnpa-sec-2016-04 X.509AF dissector crash. Bug 12002 CVE-2016-2524 -...
wireshark -- multiple vulnerabilities
Wireshark development team reports: The following vulnerabilities have been fixed: wnpa-sec-2016-02 ASN.1 BER dissector crash. Bug 11828 CVE-2016-2522 wnpa-sec-2016-03 DNP dissector infinite loop. Bug 11938 CVE-2016-2523 wnpa-sec-2016-04 X.509AF dissector crash. Bug 12002 CVE-2016-2524...
Kepware Resource Exhaustion Vulnerability
OVERVIEW Adam Crain of Automatak and Chris Sistrunk of Mandiant have identified a resource exhaustion vulnerability in the Kepware Technologies’ DNP Master Driver for the KEPServerEX Communications Platform. Kepware Technologies has produced a new version that mitigates this vulnerability. This...
CVE-2014-5429
DNP Master Driver 3.02 and earlier in Elipse SCADA 2.29 build 141 and earlier, E3 1.0 through 4.6, and Elipse Power 1.0 through 4.6 allows remote attackers to cause a denial of service CPU consumption via malformed packets...
CVE-2014-5429
CVE-2014-5429 affects the DNP Master Driver (V3.02 and earlier) used by Elipse SCADA, Elipse E3 (V1.0–V4.6), and Elipse Power (V1.0–V4.6). The root cause is handling of malformed DNP packets, leading to resource exhaustion and a denial of service (CPU consumption). Affected products can become un...
CVE-2014-2343
Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service excessive data processing via a crafted DNP request over a serial line...
Design/Logic Flaw
Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service excessive data processing via a crafted DNP request over a serial line...
CVE-2014-2343 Triangle MicroWorks SCADA Data Gateway Resource Exhaustion
Triangle MicroWorks SCADA Data Gateway before 3.00.0635 allows physically proximate attackers to cause a denial of service excessive data processing via a crafted DNP request over a serial line...