529 matches found
CVE-2023-24134
CVE-2023-24134 affects Jensen of Scandinavia Eagle 1200AC (V15.03.06.33_en). The root cause is a stack overflow in the /goform/WifiBasicSet endpoint triggered via the wepkey3 parameter. Documented impact indicates potential denial of service with high availability impact, while other impact vecto...
APT-C-36 Strikes Again: Blind Eagle Hackers Target Key Industries in Colombia
The threat actor known as Blind Eagle has been linked to a new campaign targeting various key industries in Colombia. The activity, which was detected by the BlackBerry Research and Intelligence Team on February 20, 2023, is also said to encompass Ecuador, Chile, and Spain, suggesting a slow...
APT-C-36 Strikes Again: Blind Eagle Hackers Target Key Industries in Colombia
The threat actor known as Blind Eagle has been linked to a new campaign targeting various key industries in Colombia. The activity, which was detected by the BlackBerry Research and Intelligence Team on February 20, 2023, is also said to encompass Ecuador, Chile, and Spain, suggesting a slow...
The vulnerability of Hirschmann EAGLE’s web server allows attackers to enhance their privileges.
The vulnerability of the Hirschmann EAGLE industrial Ethernet switches involves errors in the processing of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
PT-2023-36403 · Belden · Hirschmann Hisecos
Уязвимость веб-сервера промышленных межсетевых экранов Hirschmann EAGLE связана с ошибками при обработке входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...
Blind Eagle Hackers resurfaced with a formidable infection chain
Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary Blind Eagle is a financially motivated threat group that has been targeting individuals in numerous South American countries since at least 2018. A novel infection chain involving a more complex toolkit w...
Blind Eagle Hackers Return with Refined Tools and Sophisticated Infection Chain
A financially motivated threat actor tracked as Blind Eagle has resurfaced with a refined toolset and an elaborate infection chain as part of its attacks targeting organizations in Colombia and Ecuador. Check Point's latest research offers new insights into the Spanish-speaking group's tactics an...
The vulnerability of the Ethernet interfaces of Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino allows for bypassing the cryptographic signature verification on a USB drive. This enables a perpetrator to load any arbitrary image of the embedded software onto the device.
The vulnerability of the Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino lies in bypassing the cryptographic signature verification on a USB drive. Exploiting this vulnerability allows a malicious actor to download any arbitrary image of the embedded software...
The vulnerability of the Ethernet interfaces of Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino lies in the execution of operations outside the buffer in memory, allowing attackers to cause system failures.
The vulnerability of the Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially created OPC packets...
The vulnerability in the implementation of the SSH network protocol of Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino allows a perpetrator to execute arbitrary code.
The vulnerability of the SSH network protocol implementation in the Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino devices is related to the use of strictly encrypted login credentials. Exploiting this vulnerability allows a malicious actor to execute...
The vulnerability of implementations of OPC Classic standards in network interfaces of Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino allows attackers to circumvent existing security restrictions.
The vulnerability of OPC Classic standard implementations in network interfaces of Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to circumvent existing...
The vulnerability of the Ethernet interfaces of Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino, related to insufficient input data validation, allows attackers to execute arbitrary code.
The vulnerability of the Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by connecting a USB drive containing a specially crafted...
The vulnerability of the MODBUS protocol implementation in Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino allows attackers to circumvent existing security restrictions.
The vulnerability of the MODBUS protocol implementation in Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino lies in security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions using specially...
Null pointer dereference
Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of the FwBlockServiceSmm driver, certain instances of SpiAccessLib could be tricked into writing 0xff to arbitrary system and SMRAM addresses. Fixed in: INTEL Purley-R: 05.21.51.00...
The vulnerability of the TLS implementation in the microsoftware-based Industrial Ethernet Switch Hirschmann Eagle 20 (EagleSDV) allows a attacker to induce a service failure.
The vulnerability of the TLS implementation in the microprogrammable industrial Ethernet interface device Hirschmann Eagle 20 EagleSDV is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service...
Malicious code in @arkadium/eagle-user-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7a1219186b72612034e596232352022cd3f3e5eca9f1f4bd2e4787909d4aa9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-81 Malicious code in @arkadium/eagle-user-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7a1219186b72612034e596232352022cd3f3e5eca9f1f4bd2e4787909d4aa9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview @arkadium/eagle-user-client is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if th...
Hackers for Hire: Adversaries Employ ‘Cyber Mercenaries’
A for-hire cybercriminal group is feeling the talent-drought in tech just like the rest of the sector and has resorted to recruiting so-called “cyber-mercenaries” to carry out specific illicit hacks that are part of larger criminal campaigns. Dubbed Atlas Intelligence Group A.I.G., the cybergang...
GHSA-VJ6F-Q4W6-QX9P Plaintext Storage of a Password in Jenkins Eagle Tester Plugin
Jenkins Eagle Tester Plugin 1.0.9 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system...