127 matches found
EPA scan Fails. Error: Failed sending epaq
Error: Failed sending Epaq We will see following error in plugin logs: 2022-01-14 07:03:05.860 | Tid: 10876 | ERROR | nsstartepa | 1030 | Failed sending GET epaq. Return code: -4 2022-01-14 07:03:05.860 | Tid: 10876 | DEBUG | nsstartepa returning Failed sending epaq Following message will be seen...
Mitsubishi Electric Multiple Products Predictable Exact Value From Previous Values (CVE-2020-16226)
Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
EPA fails after Chrome/Edge version 98 update
NOTE: It’s recommended to have latest version of EPA and Gateway Plugins to get optimum User experience as several items have been addressed in recent versions such as disconnection on reboot and standalone setup for plugin. Few of the issues in feedback , “disconnection on reboot”, and “standalo...
hero.epa.gov Cross Site Scripting vulnerability OBB-2344664
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| hero.epa.gov ---|--- Open Bug Bounty...
hero.epa.gov Cross Site Scripting vulnerability OBB-2298764
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
enviro.epa.gov Cross Site Scripting vulnerability OBB-2298750
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
hero.epa.gov Cross Site Scripting vulnerability OBB-2290597
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
All Vulnerabilities for enservices.epa.gov Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| enservices.epa.gov ---|--- Open Bug...
enviro.epa.gov Cross Site Scripting vulnerability OBB-2276253
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| enviro.epa.gov ---|--- Open Bug Bounty...
enviro.epa.gov Cross Site Scripting vulnerability OBB-2273285
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
enviro.epa.gov Cross Site Scripting vulnerability OBB-2269876
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| enviro.epa.gov ---|--- Open Bug Bounty...
enviro.epa.gov Cross Site Scripting vulnerability OBB-2247802
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| enviro.epa.gov ---|--- Open Bug Bounty...
hero.epa.gov Cross Site Scripting vulnerability OBB-2225273
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
hero.epa.gov Cross Site Scripting vulnerability OBB-2217997
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ends2.epa.gov Cross Site Scripting vulnerability OBB-2124524
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| ends2.epa.gov ---|--- Open Bug Bounty...
MAC1100 PLC Information Disclosure Vulnerability (CNVD-2021-62450)
The MAC1100 PLC is an industrial control product PLC. A security vulnerability exists in the EPA protocol of the MAC1100 PLC that can be exploited by an attacker to read the contents of arbitrary memory...
CVE-2020-18756
An arbitrary memory access vulnerability in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100 allows attackers to read the contents of any variable area...
CVE-2020-18759
An information disclosure vulnerability exists in the EPA protocol of Dut Computer Control Engineering Co.'s PLC MAC1100...
