CVE-2020-28221

A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE version details in the notification that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI...

CVE-2020-28221: Improper Input Validation

A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE version details in the notification that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI...

PT-2021-5467

Name of the Vulnerable Software and Affected Versions WISE-4060 affected versions not specified Description The issue is related to the storage of confidential information in an unencrypted manner in the WISE-4060 Ethernet module's firmware. This could allow an attacker to gain full access to the...

PT-2021-5474

Name of the Vulnerable Software and Affected Versions WISE-4060 affected versions not specified Description The issue is related to the basic HTTP authorization method in the WISE-4060 Ethernet module's web application, which involves the transmission of data in plain text. This could allow a...

PT-2021-5471

Name of the Vulnerable Software and Affected Versions WISE-4060, Adam-6050 D, Adam.NET Utilit affected versions not specified Description The issue is related to weak password requirements in the software of Ethernet modules. This can be exploited by a remote attacker using a brute force attack t...

PT-2021-5468

Name of the Vulnerable Software and Affected Versions WISE-4060 and Adam-6050 D affected versions not specified Description The issue is related to shortcomings in the authorization procedure of the Ethernet module's firmware. It allows a remote attacker to gain full access to the device with...

XINJE XDME-30T4-E Ethernet Protocol Denial of Service Vulnerability

XINJE XDME-30T4-E is a controller product of Ethernet type series. A denial of service vulnerability exists in the XINJE XDME-30T4-E Ethernet protocol, which can be exploited by attackers to cause the device to go down and not function properly...

Denial of Service Vulnerability in XINJE XL5E-16T

The XINJE XL5E-16T PLC Unit is a controller product of the Ethernet type series. A denial of service vulnerability exists in the XINJE XL5E-16T. An attacker can exploit this vulnerability to cause the device to not function properly...

MOXA AWK-1131A Ethernet 802LLC Protocol Denial of Service Vulnerability

Moxa is a leader in industrial automation, providing complete industrial equipment connectivity, industrial computer and industrial network solutions, and is committed to promoting and practicing the Industrial Internet together. A denial of service vulnerability exists in the MOXA AWK-1131A...

XINJE XL5E-16T ModbusTCP Protocol Denial of Service Vulnerability

XINJE XL5E-16T is a controller product of Ethernet type series. A denial of service vulnerability exists in the XINJE XL5E-16T ModbusTCP protocol, which can be exploited by attackers to cause the device to go down and not function properly...

CVE-2021-3031

Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall memory into the...

CVE-2021-3031

Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall memory into the...

Information disclosure

Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall memory into the...

CVE-2021-3031 PAN-OS: Information exposure in Ethernet data frame construction (Etherleak)

Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall memory into the...

CVE-2021-3031

CVE-2021-3031 (Etherleak) affects PAN-OS on multiple Palo Alto Networks devices (PA-200/220/500/800/2000/3000/3200/5200/7000 series). Padding bytes in Ethernet frames are not cleared before frame creation, causing leakage of tiny memory fragments into packets. An attacker on the same Ethernet sub...

PAN-OS: Information exposure in Ethernet data frame construction (Etherleak)

Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-5000 Series, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall...

CVE-2021-3031

Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall memory into the...

CVE-2021-0221

In an EVPN/VXLAN scenario, if an IRB interface with a virtual gateway address VGA is configured on a PE, a traffic loop may occur upon receipt of specific IP multicast traffic. The traffic loop will cause interface traffic to increase abnormally, ultimately leading to a Denial of Service DoS in...

CVE-2021-3031: Exposure of Sensitive Information to an Unauthorized Actor

Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall memory into the...

Multiple Palo Alto Networks Product Information Disclosure Vulnerabilities

Palo Alto Networks PAN-OS and others are products of Palo Alto Networks, Inc.Palo Alto Networks PAN-OS is a set of operating systems developed for its firewall appliances.Palo Alto Networks PA-200 is a firewall appliance.Palo Alto Networks PA-220 is a firewall appliance. An information disclosure...