CVE-2021-33597: Undefined Security Weakness

A Denial-of-Service DoS vulnerability was discovered in F-Secure Atlant whereby the SAVAPI component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service DoS of the...

CVE-2021-20596

NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a DoS condition in communication by sending specially crafted...

CVE-2021-20596

NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a DoS condition in communication by sending specially crafted...

CVE-2021-20596

NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a DoS condition in communication by sending specially crafted...

Null pointer dereference

NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a DoS condition in communication by sending specially crafted...

CVE-2021-20596

CVE-2021-20596 affects Mitsubishi Electric MELSEC-F Series MELSEC-F FX3U-ENET family (FX3U-ENET, FX3U-ENET-L, FX3U-ENET-P502) with firmware versions 1.14 and prior. The vulnerability is a NULL pointer dereference in the Ethernet interface block that allows a remote unauthenticated attacker to cau...

CVE-2021-20596: NULL Pointer Dereference

NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a DoS condition in communication by sending specially crafted...

PT-2021-14067

Name of the Vulnerable Software and Affected Versions: MELSEC-F Series FX3U-ENET firmware versions 1.14 and prior MELSEC-F Series FX3U-ENET-L firmware versions 1.14 and prior MELSEC-F Series FX3U-ENET-P502 firmware versions 1.14 and prior Description: A NULL Pointer Dereference issue allows a...

PT-2021-4018

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 14.8.5 Description A reflected cross-site scripting issue exists due to improper validation of paths provided in the f, d, and dir parameters in tce select mediafile.php. This could cause reflected XSS via unsanitized...

PT-2021-4033

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 14.8.4 Description A reflected cross-site scripting issue exists due to improper validation of the paths provided in the f, d, and dir parameters in tce filemanager.php. This could cause reflected XSS via the unsanitiz...

ICS Focused Malware

Updated July 20, 2021: The U.S. Government attributes this activity to Russian nation-state cyber actors and assess that Russian nation-state cyber actors deployed Havex malware against industrial control systems. For more information on Russian malicious cyber activity, refer...

Mitsubishi Electric MELSEC-F Series

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: MELSEC-F Series Vulnerability: NULL Pointer Dereference 2. RISK EVALUATION Successful exploitation of this vulnerability may cause a denial-of-service condition in...

CVE-2021-33540

In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists...

CVE-2021-33540

The CVE affects Phoenix Contact AXL F BK and IL BK devices, where an undocumented password-protected FTP access to the root directory exists. The root cause is an insecure/undocumented FTP auth path, enabling access to the device’s root filesystem. The available data indicate a high-severity impa...

Phoenix Contact AXL F BK and IL BK 信任管理问题漏洞

Phoenix Contact AXL F BK PN is a bus coupler from Phoenix Contact, Germany. A security vulnerability exists in the Phoenix Contact AXL F BK and IL BK that stems from the program having undocumented password-protected FTP access to the root directory...

PT-2021-20187

Name of the Vulnerable Software and Affected Versions Phoenix Contact AXL F BK and IL BK product families affected versions not specified Description The issue concerns an undocumented password-protected FTP access to the root directory in certain devices. There is no information provided about t...

CVE-2021-33540: Use of Hard-coded Credentials

In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists...

CVE-2021-33572

A Denial-of-Service DoS vulnerability was discovered in F-Secure Linux Security whereby the FSAVD component used in certain F-Secure products can crash while scanning larger packages/fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in...

Denial of service

A Denial-of-Service DoS vulnerability was discovered in F-Secure Linux Security whereby the FSAVD component used in certain F-Secure products can crash while scanning larger packages/fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in...

CVE-2021-33572 Denial-of-Service (DoS) Vulnerability

A Denial-of-Service DoS vulnerability was discovered in F-Secure Linux Security whereby the FSAVD component used in certain F-Secure products can crash while scanning larger packages/fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in...