CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

286 matches found

CNVD•added 2016/09/21 12:00 a.m.•7 views

Schneider 140NOE77101 Ethernet Module IP Protocol Denial of Service Vulnerability

The 140NOE77101 is an Ethernet communication module for Schneider's Quantum series PLCs. A denial of service vulnerability exists in the 140NOE77101 Ethernet module IP protocol, which occurs when the NOE module receives all segmented and reorganized messages with a total length exceeding 65535...

6.8AI score

SaveExploits0

NVD•added 2016/09/06 12:59 a.m.•23 views

CVE-2016-7114

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

9CVSS9.2AI score0.02113EPSS

SaveExploits0References5

OSV•added 2016/09/06 12:59 a.m.•7 views

CVE-2016-7114

8.8CVSS5.7AI score0.02113EPSS

SaveExploits0References5

NVD•added 2016/09/06 12:59 a.m.•19 views

CVE-2016-7113

7.8CVSS8.4AI score0.03002EPSS

SaveExploits0References5

Prion•added 2016/09/06 12:59 a.m.•18 views

Authentication flaw

10CVSS7AI score0.0286EPSS

SaveExploits0References5Affected Software1

OSV•added 2016/09/06 12:59 a.m.•3 views

CVE-2016-7112

9.8CVSS5.7AI score0.0286EPSS

SaveExploits0References5

Prion•added 2016/09/06 12:59 a.m.•19 views

Authentication flaw

9CVSS7AI score0.02113EPSS

SaveExploits0References5Affected Software1

Cvelist•added 2016/09/06 12:00 a.m.•33 views

CVE-2016-7113

7.2AI score0.03002EPSS

SaveExploits0References5

Cvelist•added 2016/09/06 12:00 a.m.•30 views

CVE-2016-7112

9.5AI score0.0286EPSS

SaveExploits0References5

CVE•added 2016/09/06 12:00 a.m.•72 views

CVE-2016-7113

Siemens SIPROTEC 4/Compact EN100 Ethernet module vulnerabilities include CVE-2016-7113 (IMPROPER INPUT VALIDATION) where specially crafted packets to Port 80/TCP may cause the EN100 module to enter defect mode. Affected firmware variants are PROFINET IO (< V1.04.01), Modbus TCP (< V1.10.01/...

7.8CVSS8.1AI score0.03002EPSS

SaveExploits0References5Affected Software1

CVE•added 2016/09/06 12:00 a.m.•72 views

CVE-2016-7114

Siemens SIPROTEC 4/Compact EN100 Ethernet module family is affected by CVE-2016-7114 (Improper Authentication). The vulnerability allows remote attackers with network access to the device web interface (port 80) to possibly circumvent authentication and perform administrative operations, requirin...

9CVSS9AI score0.02113EPSS

SaveExploits0References5Affected Software1

CNVD•added 2016/08/09 12:00 a.m.•8 views

Mitsubishi LJ71E71-100-CM Communication Module Web Services Buffer Overflow Vulnerability

Mitsubishi L06 is a high-end PLC of Mitsubishi, its Ethernet communication module LJ71E71-100-CM is open to web service, support http protocol communication, you can access and set the configuration information of the device by logging into the web server. In the HTTP message sent to the...

7.1AI score

SaveExploits0

ICS•added 2016/06/10 6:00 a.m.•54 views

Siemens SIPROTEC 4 and SIPROTEC Compact Vulnerabilities

OVERVIEW Siemens reports that they have released a firmware update for SIPROTEC 4 and SIPROTEC Compact devices to mitigate authentication bypass and resource exhaustion vulnerabilities. Kirill Nesterov and Anatoly Katushin from Kaspersky Lab reported some of these vulnerabilities directly to...

10CVSS9.4AI score0.03002EPSS

SaveExploits0References10

OSV•added 2016/05/31 1:59 a.m.•7 views

CVE-2016-4785

5.3CVSS5.8AI score0.02676EPSS

SaveExploits0References6

OSV•added 2016/05/31 1:59 a.m.•3 views

CVE-2016-4784

A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...

5.3CVSS5.7AI score0.02676EPSS

SaveExploits0References6

NVD•added 2016/05/31 1:59 a.m.•25 views

CVE-2016-4784

5.3CVSS6AI score0.02676EPSS

SaveExploits0References6

Prion•added 2016/05/31 1:59 a.m.•20 views

Design/Logic Flaw

5CVSS6.6AI score0.02676EPSS

SaveExploits0References6Affected Software1

Prion•added 2016/05/31 1:59 a.m.•16 views

Design/Logic Flaw

5CVSS6.9AI score0.02676EPSS

SaveExploits0References6Affected Software1

CVE•added 2016/05/31 1:00 a.m.•70 views

CVE-2016-4784

CVE-2016-4784 affects Siemens SIPROTEC SIPROTEC 4/Compact devices with EN100 Ethernet module and SIPROTEC Merging Unit 6MU80. The vulnerability is information disclosure via the integrated web server (port 80) when network access is possible, allowing remote attackers to obtain sensitive device i...

5.3CVSS6.7AI score0.02676EPSS

SaveExploits0References6Affected Software1

CVE•added 2016/05/31 1:00 a.m.•58 views

CVE-2016-4785

SiemenS SIPROTEC 4/Compact EN100 Ethernet modules are affected by CVE-2016-4785. The integrated web server (port 80) could disclose a limited amount of device memory content to remote attackers with network access, and the issue only affects EN100 Ethernet modules inside SIPROTEC4 and SIPROTEC Co...

5.3CVSS6.8AI score0.02676EPSS

SaveExploits0References6Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by