8356 matches found
Siemens ERTEC 200 High performance Industrial Ethernet Controller
Binary data 764546.prm...
Siemens 6ES7195-3BC00-0YA0 DK Standard Ethernet Controller
Binary data 764545.prm...
Siemens SCALANCE W748-1 Unmanaged Ethernet Switch
Binary data 764600.prm...
EBK BKS Buskoppler Remote Code Execution Vulnerability
The BKS EBK Ethernet-Buskoppler Pro is an Ethernet bus coupler. A code issue vulnerability exists in BKS EBK Ethernet-Buskoppler Pro versions prior to 3.01. An attacker can exploit this vulnerability to overwrite a file under the web root path and run the added web shell...
BKS EBK Ethernet-Buskoppler Pro Shell Upload
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2019-017 Product: BKS EBK Ethernet-Buskoppler Pro Manufacturer: BKS GmbH Affected Versions: 3.01 Vulnerability Type: Unrestricted Upload of File with Dangerous Type CWE-434 Risk Level: High Solution Status: Fixed Manufacturer...
FaceSentry Access Control System 6.4.8 Cleartext Password Storage
FaceSentry Access Control System 6.4.8 Cleartext Password Storage Vendor: iWT Ltd. Product web page: http://www.iwt.com.hk Affected version: Firmware 6.4.8 build 264 Algorithm A16 Firmware 5.7.2 build 568 Algorithm A14 Firmware 5.7.0 build 539 Algorithm A14 Summary: FaceSentry 5AN is a...
FaceSentry Access Control System 6.4.8 - Remote Command Injection
FaceSentry Access Control System 6.4.8 Remote Command Injection Vendor: iWT Ltd. Product web page: http://www.iwt.com.hk Affected version: Firmware 6.4.8 build 264 Algorithm A16 Firmware 5.7.2 build 568 Algorithm A14 Firmware 5.7.0 build 539 Algorithm A14 Summary: FaceSentry 5AN is a revolutionar...
PT-2019-4658 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.2.3 Description: The issue is related to a buffer overflow in memory due to an out-of-bounds access in the hclge tm schd mode vnet base cfg function. This could allow an attacker to cause a denial of service...
The vulnerability of the microprogrammed programmable logic controller Modicon Quantum, related to errors in access control mechanisms, allows a intruder to trigger a service failure or alter the controller’s configuration.
The vulnerability of the microprogrammed programmable logic controller Modicon Quantum is related to errors in the access control mechanisms. Exploiting this vulnerability could allow an attacker to cause service failures or modify the controller’s configuration using the Ethernet/IP protocol...
PT-2019-4041
Name of the Vulnerable Software and Affected Versions i40e driver for IntelR Ethernet 700 Series Controllers versions prior to 2.8.43 Description The issue is caused by insufficient input validation in the i40e driver, which may allow an authenticated user to potentially enable a denial of servic...
Schneider Electric Modicon M580 UMAS strategy transfer denial-of-service vulnerability
Summary An exploitable denial-of-service vulnerability exists in the UMAS strategy transfer functionality of the Schneider Electric Modicon M580 programmable automation controller firmware version SV2.70. A specially crafted UMAS command can cause the device to enter a recoverable fault state,...
Schneider Electric Modicon M580 UMAS set breakpoint denial-of-service vulnerability
Summary An exploitable denial-of-service vulnerability exists in the UMAS set breakpoint functionality of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.70. A specially crafted UMAS command can cause the device to enter a non-recoverable fault state,...
Schneider Electric UnityPro PLC simulator remote code execution vulnerability
Summary An exploitable remote code execution vulnerability exists in the UMAS strategy programming functionality of the Schneider Electric Unity Pro L Programming Software PLC Simulator. A specially crafted sequence of UMAS commands sent to the software’s PLC simulator can cause a modified strate...
Schneider Electric Modicon M580 UMAS read system blocks and bits information disclosure vulnerability
Summary An exploitable information disclosure vulnerability exists in the UMAS Read System Blocks and Bits functionality of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.70. A specially crafted UMAS command can cause the device to return blocks of...
Schneider Electric Modicon M580 UMAS Read Memory Block Out Of Bounds Information Disclosure Vulnerability
Summary An exploitable information disclosure vulnerability exists in the UMAS memory block read functionality of the Schneider Electric Modicon M580 Programmable Automation Controller. A specially crafted UMAS request can cause an out of bounds read, resulting in disclosure of sensitive...
Schneider Electric Modicon M580 UnityPro reliance on untrusted inputs vulnerability
Summary An exploitable reliance on untrusted inputs vulnerability exists in the strategy transfer function of the Schneider Electric Unity Pro L Programming Software. When a specially crafted strategy is programmed to a Modicon M580 Programmable Automation Controller, and UnityProL is used to rea...
Schneider Electric Modicon M580 UMAS strategy read information disclosure vulnerability
Summary An exploitable information disclosure vulnerability exists in the UMAS strategy read functionality of the Schneider Electric Modicon M580 Programmable Automation Controller firmware version SV2.70. A specially crafted UMAS command can cause the device to return blocks of the programmed...
Cisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability
According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the Fibre Channel over Ethernet FCoE protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. T...
PHOENIX CONTACT FL NAT SMx
1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Phoenix Contact Equipment: FL NAT SMx Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow unauthorized users full access to the...