PT-2019-13485 · Hms Networks · En100 Ethernet Module Iec 61850 Variant +4

Name of the Vulnerable Software and Affected Versions: EN100 Ethernet module DNP3 variant All versions EN100 Ethernet module IEC 61850 variant All versions V4.37 EN100 Ethernet module IEC104 variant All versions EN100 Ethernet module Modbus TCP variant All versions EN100 Ethernet module PROFINET ...

Siemens EN100 Ethernet Module Cross-Site Scripting Vulnerability

Siemens EN100 Ethernet Module is an Ethernet module product from Siemens, Germany. A cross-site scripting vulnerability exists in Siemens EN100 Ethernet Module, which can be exploited by an attacker to cause an application to behave in a manner not intended by a legitimate user...

Siemens EN100 Ethernet Module Buffer Overflow Vulnerability

Siemens EN100 Ethernet Module is an Ethernet module product from Siemens, Germany. A buffer overflow vulnerability exists in Siemens EN100 Ethernet Module, which can be exploited by an attacker to cause a denial of service...

Denial of Service Vulnerability in USR-TCP232-410S

There are people networking to the Internet of Things communication technology as the core, the launch of industrial communications, LPWAN and gateway, Internet of Things module, industrial control machine, network IO controller and other networking communication equipment, including...

Multiple Siemens EN100 Ethernet Modules SSA-418979 Multiple Security Vulnerabilities

Description Multiple Siemens EN100 Ethernet Modules are prone to multiple security vulnerabilities. An attacker may leverage these issues to execute arbitrary code, using directory-traversal sequences '../' to retrieve sensitive information and execute arbitrary script code in the browser of an...

PT-2019-5577

Name of the Vulnerable Software and Affected Versions Intel Ethernet I218 Adapter driver for Windows 10 versions prior to 24.1 Description The issue is related to insufficient memory protection, which may allow an authenticated user to potentially enable information disclosure via local access...

Siemens EN100 Ethernet Module (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: EN100 Ethernet Module Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Cross-site Scripting, Relative Path Traversal 2. UPDATE...

 Intel® Ethernet I218 Adapter Driver for Windows* Advisory

Summary: A potential security vulnerability in Intel® Ethernet I218 Adapter driver for Windows 10 may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11096 Description: Insufficient memory protectio...

Multiple Weidmueller Products Resource Management Error Vulnerability

Weidmueller IE-SW-VL05M-5TX and so on are an industrial Ethernet switch from Weidmueller, Germany. A resource management error vulnerability exists in multiple Weidmueller products, which can be exploited by an attacker via a specially crafted packet to cause the device to crash...

Multiple Weidmueller Product Information Disclosure Vulnerabilities

Weidmueller IE-SW-VL05M-5TX and so on are an industrial Ethernet switch from Weidmueller, Germany. An information disclosure vulnerability exists in multiple Weidmueller products, which can be exploited by an attacker to guess the authentication information in a cookie...

Multiple Weidmueller Products Information Disclosure Vulnerability (CNVD-2020-01004)

Weidmueller IE-SW-VL05M-5TX and so on are an industrial Ethernet switch from Weidmueller, Germany. An information disclosure vulnerability exists in multiple Weidmueller products that originates from a program passing sensitive credential data in clear text. An attacker could exploit this...

Multiple Weidmueller Products Insecure Credential Storage Vulnerabilities

Weidmueller IE-SW-VL05M-5TX and so on are an industrial Ethernet switch from Weidmueller, Germany. An insecure credential storage vulnerability exists in multiple Weidmueller products, which stems from a program storing passwords in plaintext form and can be exploited by an attacker to read the...

Unspecified Vulnerability in Multiple Weidmueller Models

Weidmueller IE-SW-VL05M-5TX and so on are an industrial Ethernet switch from Weidmueller, Germany. A security vulnerability exists in a number of Weidmueller products. The vulnerability stems from a failure of the authentication mechanism to perform brute force protection, which can be exploited ...

CVE-2019-16671

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Remote authenticated users can crash a device with a special packet because of Uncontrolled Resource Consumption...

Weidmueller Industrial Ethernet Switches

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Weidmueller Equipment: Industrial Ethernet Switches Vulnerabilities: Improper Restriction of Excessive Authentication Attempts, Uncontrolled Resource Consumption, Missing Encryption of Sensitive...

Analysing the Attack Surface of an Industrial Data Acquisition Device

Introduction The Data Station Plus from Red Lion Controls was handed to me to analyse the attack surface. The device is designed to connect to SCADA data acquisition devices over Modbus, Profibus, etc. by Serial or Ethernet connection. Data is collected and recorded to a local compact flash card...

Command Execution Vulnerability in KPS2204-2T4D-L3-L3

The KPS2204-2T4D-L3-L3 is a protocol converter device that integrates Ethernet and serial data transmission. The KPS2204-2T4D-L3-L3 suffers from a command execution vulnerability that can be exploited by an attacker to gain root privileges on the device...

V-Zug Combi-Steam MSLQ Memory Corruption Vulnerability

The V-Zug Combi-Steam MSLQ is an all-in-one microwave, oven, and steam machine unit from Swiss Swiss V-Zug. A security vulnerability exists in the V-Zug Combi-Steam MSLQ using firmware versions prior to Ethernet R07 and firmware versions prior to WLAN R05. An attacker could exploit the...

CVE-2019-19043

A memory leak in the i40esetupmacvlans function in drivers/net/ethernet/intel/i40e/i40emain.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering i40esetupchannel failures, aka CID-27d461333459...

CVE-2019-19047: Missing Release of Memory after Effective Lifetime

A memory leak in the mlx5fwfatalreporterdump function in drivers/net/ethernet/mellanox/mlx5/core/health.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service memory consumption by triggering mlx5crdumpcollect failures, aka CID-c7ed6d0183d5...