Intel® Ethernet I218 Adapter Driver for Windows* Advisory

Summary: A potential security vulnerability in Intel® Ethernet I218 Adapter driver for Windows 10 may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11096 Description: Insufficient memory protectio...

Multiple Weidmueller Products Insecure Credential Storage Vulnerabilities

Weidmueller IE-SW-VL05M-5TX and so on are an industrial Ethernet switch from Weidmueller, Germany. An insecure credential storage vulnerability exists in multiple Weidmueller products, which stems from a program storing passwords in plaintext form and can be exploited by an attacker to read the...

Unspecified Vulnerability in Multiple Weidmueller Models

Weidmueller IE-SW-VL05M-5TX and so on are an industrial Ethernet switch from Weidmueller, Germany. A security vulnerability exists in a number of Weidmueller products. The vulnerability stems from a failure of the authentication mechanism to perform brute force protection, which can be exploited ...

Multiple Weidmueller Products Information Disclosure Vulnerability (CNVD-2020-01004)

Weidmueller IE-SW-VL05M-5TX and so on are an industrial Ethernet switch from Weidmueller, Germany. An information disclosure vulnerability exists in multiple Weidmueller products that originates from a program passing sensitive credential data in clear text. An attacker could exploit this...

Multiple Weidmueller Products Resource Management Error Vulnerability

Weidmueller IE-SW-VL05M-5TX and so on are an industrial Ethernet switch from Weidmueller, Germany. A resource management error vulnerability exists in multiple Weidmueller products, which can be exploited by an attacker via a specially crafted packet to cause the device to crash...

Multiple Weidmueller Product Information Disclosure Vulnerabilities

Weidmueller IE-SW-VL05M-5TX and so on are an industrial Ethernet switch from Weidmueller, Germany. An information disclosure vulnerability exists in multiple Weidmueller products, which can be exploited by an attacker to guess the authentication information in a cookie...

CVE-2019-16671

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Remote authenticated users can crash a device with a special packet because of Uncontrolled Resource Consumption...

Weidmueller Industrial Ethernet Switches

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Weidmueller Equipment: Industrial Ethernet Switches Vulnerabilities: Improper Restriction of Excessive Authentication Attempts, Uncontrolled Resource Consumption, Missing Encryption of Sensitive...

Analysing the Attack Surface of an Industrial Data Acquisition Device

Introduction The Data Station Plus from Red Lion Controls was handed to me to analyse the attack surface. The device is designed to connect to SCADA data acquisition devices over Modbus, Profibus, etc. by Serial or Ethernet connection. Data is collected and recorded to a local compact flash card...

Command Execution Vulnerability in KPS2204-2T4D-L3-L3

The KPS2204-2T4D-L3-L3 is a protocol converter device that integrates Ethernet and serial data transmission. The KPS2204-2T4D-L3-L3 suffers from a command execution vulnerability that can be exploited by an attacker to gain root privileges on the device...

V-Zug Combi-Steam MSLQ Memory Corruption Vulnerability

The V-Zug Combi-Steam MSLQ is an all-in-one microwave, oven, and steam machine unit from Swiss Swiss V-Zug. A security vulnerability exists in the V-Zug Combi-Steam MSLQ using firmware versions prior to Ethernet R07 and firmware versions prior to WLAN R05. An attacker could exploit the...

CVE-2019-19043

A memory leak in the i40esetupmacvlans function in drivers/net/ethernet/intel/i40e/i40emain.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering i40esetupchannel failures, aka CID-27d461333459...

Intel Ethernet 700 Series Controllers Buffer Overflow Vulnerability (CNVD-2019-41457)

Intel Ethernet 700 Series Controllers are network adapter products from Intel. A buffer overflow vulnerability exists in Intel Ethernet 700 Series Controllers firmware prior to version 7.0. An attacker could exploit this vulnerability to achieve elevation of privilege...

Intel Ethernet 700 Series Controllers Insufficient Access Control Vulnerability (CNVD-2019-41456)

Intel Ethernet 700 Series Controllers are network adapter products from Intel. An insufficient access control vulnerability exists in the ilp60x64.sys driver for Intel Ethernet 700 Series Controllers prior to version 1.33.0.0. An attacker could exploit this vulnerability to achieve elevation of...

Intel Ethernet 700 Series Controllers Resource Leakage Vulnerability

Intel Ethernet 700 Series Controllers are network adapter products from Intel. A resource leakage vulnerability exists in Intel Ethernet 700 Series Controllers versions prior to 7.0. An attacker could exploit this vulnerability to cause a denial of service...

Intel Ethernet 700 Series Controllers i40e Driver Denial of Service Vulnerability

Intel Ethernet 700 Series Controllers are network adapter products from Intel. A denial of service vulnerability exists in the i40e driver for Intel Ethernet 700 Series Controllers prior to version 2.8.43. The vulnerability stems from insufficient input validation in the i40e driver. An attacker...

Intel Ethernet 700 Series Controllers Insufficient Access Control Vulnerability

Intel Ethernet 700 Series Controllers are network adapter products from Intel. An Insufficient Access Control vulnerability exists in Intel Ethernet 700 Series Controllers firmware prior to version 7.0. An attacker could exploit this vulnerability to cause a denial of service...

Intel Ethernet 700 Series Controllers Buffer Overflow Vulnerability

Intel Ethernet 700 Series Controllers are network adapter products from Intel. A buffer overflow vulnerability exists in the i40e driver for Intel Ethernet 700 Series Controllers versions prior to 7.0. An attacker could exploit this vulnerability to achieve elevation of privilege...

Intel Ethernet 700 Series Controllers Denial of Service Vulnerability

Intel Ethernet 700 Series Controllers are network adapter products from Intel. A denial of service vulnerability exists in Intel Ethernet 700 Series Controllers versions prior to 7.0. The vulnerability stems from insufficient input validation in the controller's i40e driver. An attacker could...

Intel Ethernet 700 Series Controllers Insufficient Access Control Vulnerability (CNVD-2019-41458)

Intel Ethernet 700 Series Controllers are network adapter products from Intel. An insufficient access control vulnerability exists in Intel Ethernet 700 Series Controllers firmware prior to version 7.0. An attacker could exploit this vulnerability to achieve elevation of privilege, cause a denial...