Researchers Warn of Critical Flaw Affecting Industrial Automation Systems

A critical vulnerability uncovered in Real-Time Automation's RTA 499ES EtherNet/IP ENIP stack could open up the industrial control systems to remote attacks by adversaries. RTA's ENIP stack is one of the widely used industrial automation devices and is billed as the "standard for factory floor I/...

Unspecified Vulnerability in Intel Ethernet 700 Series Controllers (CNVD-2021-17792)

Intel Ethernet 700 Series Controllers is a 700 series Ethernet controller from Intel Corporation USA. A security vulnerability exists in the IntelR Ethernet 700 Series Controller that can be exploited by a privileged user to potentially enable escalation of privileges and/or denial of service via...

Unspecified Vulnerability in Intel Ethernet 700 Series Controllers (CNVD-2021-17791)

Intel Ethernet 700 Series Controllers is a 700 series Ethernet controller from Intel Corporation USA. A security vulnerability exists in IntelR Ethernet 700 Series Controllers prior to version 7.3, which is caused due to insufficient access control and can be exploited by a privileged user to...

Unspecified Vulnerability in Intel Ethernet 700 Series Controllers

Intel Ethernet 700 Series Controllers is a 700 series Ethernet controller from Intel Corporation USA. A security vulnerability exists in IntelR Ethernet 700 Series Controllers prior to version 7.3, which stems from a protection mechanism failure that can be exploited by a privileged user to...

Don’t Put It on the Internet: Tesla Backup Gateway Edition

Derek Abdine, formerly Director of Rapid7 Labs, now CTO at Censys, contributed this blog post. This blog post aims to increase user awareness of the privacy and security risks of connecting devices to the internet. In this edition, we address Tesla Backup Gateways and identify some key areas wher...

Real Time Automation EtherNet/IP

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Real Time Automation RTA Equipment: 499ES EtherNet/IP ENIP Adaptor Source Code Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could...

Privilege Escalation

kernel is vulnerable to privilege escalation. A buffer overflow in the i40e driver for IntelR Ethernet 700 Series Controllers allow an authenticated local user to potentially obtain higher privileges...

Denial Of Service (DoS)

linux-gcp:xenial is vulnerable to insufficient input validation in i40e driver for IntelR Ethernet 700 Series Controllers versions. It may allow an authenticated user to potentially enable a denial of service via local access...

Denial Of Service (DoS)

linux-kvm is vulnerable to denial of service. Resource leak in the i40e driver for IntelR Ethernet 700 Series Controllers allows an authenticated user to potentially cause a denial of service condition via local access...

CVE-2020-26230 Deanonymization of COVID-19 positive users of Radar COVID

Radar COVID is the official COVID-19 exposure notification app for Spain. In affected versions of Radar COVID, identification and de-anonymization of COVID-19 positive users that upload Radar COVID TEKs to the Radar COVID server is possible. This vulnerability enables the identification and...

CVE-2020-8767

Uncaught exception in the IntelR 50GbE IP Core for IntelR Quartus Prime before version 20.2 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-8691

A logic issue in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8691

A logic issue in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8692

Insufficient access control in the firmware of the IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8693

Improper buffer restrictions in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8693

Improper buffer restrictions in the firmware of the IntelR Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8690

Protection mechanism failure in IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8692

Insufficient access control in the firmware of the IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8690

Protection mechanism failure in IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

Improper access control

Insufficient access control in the firmware of the IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...