359 matches found
CVE-2021-32497
Summary of CVE-2021-32497 (SICK SOPAS ET) : Prior to version 4.8.0, SOPAS ET allows an attacker to wrap an arbitrary executable into an SDD and hand it to a user. When the SOPAS ET emulator is started, the embedded executable may run without further checks, enabling code execution under the local...
CVE-2021-32497
SICK SOPAS ET before version 4.8.0 allows attackers to wrap any executable file into an SDD and provide this to a SOPAS ET user. When a user starts the emulator the executable is run without further checks...
SICK SOPAS ET 注入漏洞
Sick Sopas Et is an engineering tool from the German company Sick. versions prior to SICK SOPAS ET 4.8.0 contain a command injection vulnerability that could be exploited to manipulate command line parameters to pass any value to the emulator executable...
SICK SOPAS ET安全漏洞
Sick Sopas Et is an engineering tool from the German company Sick.A security vulnerability exists in versions prior to SICK SOPAS ET 4.8.0, which could be exploited by an attacker to package any executable file into an SDD and make it available to SOPAS ET users...
Vulnerabilities in SICK SOPAS ET
SICK received a report from Eden Bar of Claroty about multiple security vulnerabilities in the SICK SOPAS ET software. An unauthorized attacker could potentially craft a malicious SOPAS Device Driver SDD file, that if a user imports that file to SOPAS ET could allow arbitrary code execution on th...
Fedora: Security Advisory for et (FEDORA-2021-808fab651c)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
roch-et-gaston.fr Improper Access Control vulnerability OBB-2239387
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
bide-et-musique.com Cross Site Scripting vulnerability OBB-2143616
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
art-et-collection.blog4ever.com Cross Site Scripting vulnerability OBB-2127479
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-28397
A vulnerability has been identified in SIMATIC Drive Controller family All versions V2 V2.5 V2.5 V21.9, TIM 1531 IRC incl. SIPLUS NET variants Version V2.1. Due to an incorrect authorization check in the affected component, an attacker could extract information about access protected PLC program...
CVE-2020-28397
CVE-2020-28397 affects Siemens SIMATIC products due to an incorrect authorization check that could allow an attacker to read information about access-protected PLC variables via port 102/tcp when multiple attributes are read. Affected: SIMATIC Drive Controller family (all versions < V2.9.2); S...
CVE-2020-15782
CVE-2020-15782 covers Siemens SIMATIC S7-1200/1500 CPUs and related devices (including ET 200SP Open Controller, S7-PLCSIM Advanced, SINAMICS GH180, SINUMERIK MC/ONE, and S7-1500 Software Controller) with a memory protection bypass via a specific operation. A remote, unauthenticated attacker can ...
CVE-2020-15796
A vulnerability has been identified in SIMATIC ET 200SP Open Controller incl. SIPLUS variants V20.8, SIMATIC S7-1500 Software Controller V20.8. The web server of the affected products contains a vulnerability that could allow a remote attacker to trigger a denial-of-service condition by sending a...
CVE-2020-15796
CVE-2020-15796 affects Siemens SIMATIC Controller Web Servers, specifically the web servers in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants, V20.8) and SIMATIC S7-1500 Software Controller (V20.8) . The vulnerability stems from an Uncaught Exception (CWE-248) in the web server, which co...
arbre-et-arbuste.com Cross Site Scripting vulnerability OBB-1409547
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
science-et-vie.com Cross Site Scripting vulnerability OBB-1379893
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
objets-et-publicite.fr Cross Site Scripting vulnerability OBB-1375466
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
art-et-nature.ogite.com Cross Site Scripting vulnerability OBB-1302710
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
et-tu.co.nz Cross Site Scripting vulnerability OBB-1259785
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
maison-et-beaute.fr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1181472 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...