Siemens EN100 Ethernet Communication Module Denial of Service Vulnerability

Siemens EN100 Ethernet Communication Module is an Ethernet module from Siemens, Germany. A denial of service vulnerability exists in the Siemens EN100 Ethernet Communication Module. An attacker can exploit this vulnerability by sending specially crafted packets to port 102/tcp while oscillographs...

CVE-2018-16557

A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 All versions, SIMATIC S7-400 CPU 412-2 DP V7 All versions, SIMATIC S7-400 CPU 414-2 DP V7 All versions, SIMATIC S7-400 CPU 414-3 DP V7 All versions, SIMATIC S7-400 CPU 414-3 PN/DP V7 All versions V7.0.3, SIMATIC S7-400 CPU 414F...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 All versions, SIMATIC S7-400 CPU 412-2 DP V7 All versions, SIMATIC S7-400 CPU 414-2 DP V7 All versions, SIMATIC S7-400 CPU 414-3 DP V7 All versions, SIMATIC S7-400 CPU 414-3 PN/DP V7 All versions V7.0.3, SIMATIC S7-400 CPU 414F...

CVE-2018-16556

A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 All versions, SIMATIC S7-400 CPU 412-2 DP V7 All versions, SIMATIC S7-400 CPU 414-2 DP V7 All versions, SIMATIC S7-400 CPU 414-3 DP V7 All versions, SIMATIC S7-400 CPU 414-3 PN/DP V7 All versions V7.0.3, SIMATIC S7-400 CPU 414F...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 All versions, SIMATIC S7-400 CPU 412-2 DP V7 All versions, SIMATIC S7-400 CPU 414-2 DP V7 All versions, SIMATIC S7-400 CPU 414-3 DP V7 All versions, SIMATIC S7-400 CPU 414-3 PN/DP V7 All versions V7.0.3, SIMATIC S7-400 CPU 414F...

CVE-2018-16557

The CVE-2018-16557 entry applies to Siemens SIMATIC S7-400 family CPUs (e.g., 412-1/2 DP V7, 414-2/3 DP V7, 416-2/3 DP V7, 417-4 DP V7, PN/DP variants, H variants) and related SIPLUS/S7-400 CPU families. The vulnerability allows denial of service by sending specially crafted packets to TCP port 1...

CVE-2018-16556

CVE-2018-16556 affects Siemens SIMATIC S7-400 family CPUs (multiple models). Root cause: specially crafted packets sent to port 102/tcp (Ethernet, PROFIBUS, MPI) can cause devices to enter defect mode, requiring a manual reboot. Exploitation requires network access with no user interaction; impac...

The vulnerability of the RSLinx Classic communication server, related to uncontrolled resource consumption, allows attackers to cause service interruptions.

The vulnerability of the RSLinx Classic communication server is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted Ethernet/IP packets to port 44818...

Rockwell Automation MicroLogix Detection (EtherNet/IP)

Detection of Rockwell Automation MicroLogix PLC SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WAGO PLC Detection (HTTP)

HTTP based detection of WAGO PLC Controllers. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

WAGO PLC Detection (EtherNet/IP)

This script performs EtherNet/IP based detection of WAGO PLC Controllers. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian: Security Advisory (DLA-1599-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 27 Update: lldpad-1.0.1-9.git036e314.fc27

This package contains the Linux user space daemon and configuration tool for Intel LLDP Agent with Enhanced Ethernet support for the Data Center...

Multiple Siemens Products Cross-Site Scripting Vulnerabilities

Siemens SCALANCE S602 and others are Ethernet security modules from Siemens, Germany. A cross-site scripting vulnerability exists in several Siemens products, which can be exploited by remote attackers to inject arbitrary scripts via malicious links...

Siemens SIMATIC S7-400 Input Validation Vulnerability

Siemens SIMATIC S7-400 is a programmable logic controller for manufacturing and process automation from Siemens, Germany. An input validation vulnerability exists in the Siemens SIMATIC S7-400 product, which can be exploited by an attacker to cause a service crash via a specially crafted packet...

Cross site scripting

Cross-site scripting vulnerability in multiple FXC Inc. network devices Managed Ethernet switch FXC5210/5218/5224 firmware prior to version Ver1.00.22, Managed Ethernet switch FXC5426F firmware prior to version Ver1.00.06, Managed Ethernet switch FXC5428 firmware prior to version Ver1.00.07, Powe...

CVE-2018-0679

Cross-site scripting vulnerability in multiple FXC Inc. network devices Managed Ethernet switch FXC5210/5218/5224 firmware prior to version Ver1.00.22, Managed Ethernet switch FXC5426F firmware prior to version Ver1.00.06, Managed Ethernet switch FXC5428 firmware prior to version Ver1.00.07, Powe...

CVE-2018-0679

Cross-site scripting vulnerability in multiple FXC Inc. network devices Managed Ethernet switch FXC5210/5218/5224 firmware prior to version Ver1.00.22, Managed Ethernet switch FXC5426F firmware prior to version Ver1.00.06, Managed Ethernet switch FXC5428 firmware prior to version Ver1.00.07, Powe...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3822-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3822-1 advisory. Jim Mattson discovered that the KVM implementation in the Linux kernel mismanages the BP and OF exceptions. A local attacker in a guest virtual machine...

Ubuntu: Security Advisory (USN-3822-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...