Code injection

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. There is no bruteforce protection e.g., lockout established. An attacker might be able to bruteforce the password to authenticate on the device...

CVE-2019-17216

CVE-2019-17216 affects the V-Zug Combi-Steam MSLQ family (before Ethernet R07 and WLAN R05). The root issue is that password authentication uses MD5 to hash passwords, which enables cracking with minimal effort. This leads to a high-severity, network-remote risk affecting authentication confident...

CVE-2016-10906

A use-after-free flaw was found in the Ethernet subsystem of the Linux kernel. A race condition was observed while a data transmission from a buffer occurred when the buffer was already freed causing a use-after-free problem. Mitigation Mitigation for this issue is either not available or the...

V-SOL GPON / EPON OLT Platform File Download Vulnerability

V-SOL GPON is a network switch device. A file download vulnerability exists in the V-SOL GPON / EPON OLT platform, which can be exploited by an attacker to download a download configuration...

The vulnerability of the microprogrammed Ethernet switch software of Moxa PT-7528 and Moxa PT-7828 lies in the lack of restrictions on excessive authentication attempts, allowing attackers to circumvent existing security restrictions.

The vulnerability of the microprogrammed Ethernet switch software of Moxa PT-7528 and Moxa PT-7828 lies in the lack of restrictions on excessive authentication attempts. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions by using brute-force attack...

The vulnerability of the microprogrammed Ethernet switch software from Moxa, models PT-7528 and PT-7828, stems from the use of a rigidly encrypted cryptographic key for encrypting account data. This allows attackers to enhance their privileges.

The vulnerability of the microprogrammed Ethernet switch software of Moxa PT-7528 and Moxa PT-7828 lies in the use of a rigidly encrypted cryptographic key, which is used for encrypting account data. Exploiting this vulnerability allows a remote attacker to enhance their privileges...

Rockwell Automation Stratix Ethernet Switches < 15.3 IOS Improper Input Validation and Resource Management Errors (ICSA-18-107-04)

Binary data 720288.prm...

Rockwell Automation Stratix 8300 Ethernet Switches < 15.3 IOS Improper Input Validation and Resource Management Errors (ICSA-18-107-05)

Binary data 720287.prm...

Schneider Electric BMXNOR0200H Ethernet/Serial RTU module Access Control Error Vulnerability

The Schneider Electric BMXNOR0200H Ethernet/Serial RTU module is an Ethernet Serial RTU Remote Terminal Unit module from Schneider Electric, France. An access control error vulnerability exists in the Schneider Electric BMXNOR0200H Ethernet/Serial RTU module. The vulnerability arises from the...

Schneider Electric Quantum 140 NOE771x1 Code Issue Vulnerability

The Schneider Electric Quantum 140 NOE771x1 is an Ethernet module from Schneider Electric France. A code issue vulnerability exists in Schneider Electric Quantum 140 NOE771x1 version 6.9 and prior. The vulnerability stems from an improperly designed or implemented code development process for a...

Schneider Electric BMXNOR0200H Ethernet/Serial RTU Module Access Control Error Vulnerability

The Schneider Electric BMXNOR0200H Ethernet/Serial RTU module is an Ethernet Serial RTU Remote Terminal Unit module from Schneider Electric, France. An access control error vulnerability exists in the Schneider Electric BMXNOR0200H Ethernet/Serial RTU module. The vulnerability arises from the...

CVE-2019-6810

CWE-284: Improper Access Control vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module all firmware versions, which could cause the execution of commands by unauthorized users when using IEC 60870-5-104 protocol...

Improper access control

CWE-284: Improper Access Control vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module all firmware versions, which could cause the execution of commands by unauthorized users when using IEC 60870-5-104 protocol...

Design/Logic Flaw

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module all firmware versions, which could cause disconnection of active connections when an unusually high number of IEC 60870- 5-104 packets are received by the module on por...

CVE-2019-6813

The CVE-2019-6813 vulnerability affects Schneider Electric BMXNOR0200H Ethernet/Serial RTU modules and Modicon M340 controllers (all firmware versions). It is a CWE-754 improper check for unusual or exceptional conditions that could cause a denial of service when truncated SNMP packets are receiv...

CVE-2019-6810

CVE-2019-6810 affects Schneider Electric BMXNOR0200H Ethernet/Serial RTU module (all firmware versions). The vulnerability is an improper access control that could allow unauthorized users to execute commands when using IEC 60870-5-104. Impact is described as potential remote command execution wi...

CVE-2019-6831

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module all firmware versions, which could cause disconnection of active connections when an unusually high number of IEC 60870- 5-104 packets are received by the module on por...

CVE-2019-6831

CVE-2019-6831 affects the BMXNOR0200H Ethernet/Serial RTU module (all firmware versions), causing disconnection of active connections when an unusually high number of IEC 60870-5-104 packets are received on port 2404/TCP. Affected CVSS: v3.1 base score 8.6 (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H). E...

PT-2019-18369 · Moxa · Bmxnor0200H Ethernet / Serial Rtu Module

Name of the Vulnerable Software and Affected Versions: BMXNOR0200H Ethernet / Serial RTU module all firmware versions Description: A vulnerability exists in the BMXNOR0200H Ethernet / Serial RTU module, which could cause disconnection of active connections when an unusually high number of IEC...

Siemens SIMATIC WinCC CCRedCodiAlarm Control has a Null Pointer Vulnerability

Siemens SIMATIC is an automation software with a single engineering environment.WinCC supports the discovery and configuration of LAN device information with the PN-DCP protocol at the Ethernet layer. A null pointer vulnerability exists in the Siemens SIMATIC WinCC CCRedCodiAlarm control. An...