CVE-2020-24685: Memory Allocation with Excessive Size Value

An unauthenticated specially crafted packet sent by an attacker over the network will cause a denial-of-service DoS vulnerability. Vulnerability allows attacker to stop the PLC. After stopping ERR LED flashing red, physical access to the PLC is required in order to restart the application. This...

PT-2021-2100

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet I210 Controller series of network adapters versions prior to 3.30 Description: The issue is related to improper access control in the firmware, which may allow a privileged user to enable a denial of service via local access...

Intel® Ethernet I210 Controller Advisory

Summary: Potential security vulnerabilities in the Intel® Ethernet I210 Controller series of network adapters may allow denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-0522 Description: Improper...

Intel® Ethernet E810 Adapter Driver Advisory

Summary: Potential security vulnerabilities in some Intel® Ethernet E810 Adapter Drivers for Linux and Windows may allow denial of service or information disclosure. Intel is releasing driver updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-24504...

Intel® Ethernet Controllers Advisory

Summary: Potential security vulnerabilities in some Intel® Ethernet Controllers may allow denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-24492 Description: Insufficient access control in the firmware for t...

PT-2021-2097

Name of the Vulnerable Software and Affected Versions: Intel Ethernet E810 Adapter drivers for Linux versions prior to 1.0.4 Description: The issue is related to uncontrolled resource consumption in some Intel Ethernet E810 Adapter drivers for Linux. This could potentially allow an authenticated...

Denial of service vulnerability in Hisense Ethernet Passive Optical Fiber Access User Unit (EPON ONU) IP906H-FV1

Hisense Group Limited is an electronic information industry group company. A denial of service vulnerability exists in Hisense Ethernet Passive Optical Fiber Access User Unit EPON ONU IP906H-FV1, which can be exploited by attackers to cause a denial of service...

HPSBHF03716 rev. 3 - Intel® Ethernet I210 Controller February 2021 Security Update

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in the Intel® Ethernet I210 Controller series of network adapters which may allow denial o...

PT-2021-5465

Name of the Vulnerable Software and Affected Versions WISE-4060 affected versions not specified Description The issue is related to errors in session management within the WISE-4060 Ethernet module's firmware. It allows a remote attacker to exploit the issue and gain unauthorized access to the...

PT-2021-5466

Name of the Vulnerable Software and Affected Versions WISE-4060 and Adam-6050 D affected versions not specified Description The issue is related to errors in the password recovery mechanism of the Ethernet software. It allows a remote attacker to restore the device to its default settings using a...

PT-2021-5477

Name of the Vulnerable Software and Affected Versions WISE-4060 and Adam-6050 D affected versions not specified Description The issue is related to a lack of authentication for a critical function in the Ethernet module software, which can be exploited by a remote attacker to cause a denial of...

PT-2021-5470

Name of the Vulnerable Software and Affected Versions WISE-4060 and Adam-6050 D affected versions not specified Description The issue is related to insufficient protection of web pages in the software of WISE-4060 and Adam-6050 D web server Ethernet modules. This could allow a remote attacker to...

Vulnerability Spotlight: Allen-Bradley Flex I/O vulnerable to denial of service

Jared Rittle of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. The Rockwell Automation Allen-Bradley Flex I/O input/output device is vulnerable to a denial-of-service vulnerability. FLEX I/O provides a wide range of input/output operations while keeping a smaller form factor. Use...

Rockwell Automation MicroLogix 1400 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: Rockwell Automation Equipment: MicroLogix 1400 Vulnerability: Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-21-033-01 Rockwell Automation MicroLogix 1400 that...

Design/Logic Flaw

Resource management errors vulnerability in a robot controller of MELFA FR Seriescontroller "CR800-VD" of RV-FR-D- all versions, controller "CR800-HD" of RH-FRH-D- all versions, controller "CR800-HRD" of RH-FRHR-D- all versions, controller "CR800-VR with R16RTCPU" of RV-FR-R- all versions,...

CVE-2021-20586

Resource management errors vulnerability in a robot controller of MELFA FR Seriescontroller "CR800-VD" of RV-FR-D- all versions, controller "CR800-HD" of RH-FRH-D- all versions, controller "CR800-HRD" of RH-FRHR-D- all versions, controller "CR800-VR with R16RTCPU" of RV-FR-R- all versions,...

PT-2021-14059

Name of the Vulnerable Software and Affected Versions: MELFA FR Series versions all versions MELFA CR Series versions all versions ASSISTA versions all versions Description: A resource management error in the robot controllers allows a remote unauthenticated attacker to cause a Denial of Service...

CVE-2020-28221

A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE version details in the notification that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI...

CVE-2020-28221

A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE version details in the notification that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI...

Input validation

A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE version details in the notification that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI...