23 matches found
The vulnerability of the built-in software of the PLC Fastwel lies in the improper assignment of permissions to critical resources. This allows a malicious user to execute arbitrary commands and elevate their privileges to that of a superuser.
The vulnerability of the built-in software of the PLC Fastwel is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands and elevate their privileges to the level of superuser...
The vulnerability of the embedded software of the PLK Fastwel arises from the improper assignment of permissions for critical resources, allowing a perpetrator to gain unauthorized access to protected information.
The vulnerability of the built-in software of the PLC Fastwel is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of the built-in software of the PLC Fastwel arises from the use of dangerous methods or functions, allowing a hacker to execute arbitrary commands and elevate their privileges to superuser level.
The vulnerability of the built-in software of the PLC Fastwel is related to the use of dangerous methods or functions. Exploiting this vulnerability allows a remote attacker to execute arbitrary operating system commands and elevate their privileges to that of a superuser by sending a POST reques...
The vulnerability in the built-in software of the PLC Fastwel lies in the loading of code without checking its integrity, allowing an intruder to execute arbitrary code.
The vulnerability of the built-in software of the PLC Fastwel relates to the loading of code without checking its integrity. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the built-in software of the PLC Fastwel relates to the incorrect duration of a session, allowing an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the built-in software of the PLC Fastwel is related to an incorrect session duration. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the built-in software of the PLC Fastwel involves redirecting URLs to an unreliable website, allowing a hacker to redirect users to any given URL address.
The vulnerability in the built-in software of the PLC Fastwel relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary URL addresses remotely...
PT-2025-89: NULL Pointer Dereference in Fastwel PLC web server
The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. Exploitation of the vulnerability allows a remote attacker to cause a denial of service by sending multiple specially crafted HTTP requests. Vulnerability status: Confirmed by vend...
PT-2025-87: Incorrect session expiration in Fastwel PLC web server
The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. The discovered vulnerability can be exploited by an attacker to gain unlimited access to a device by brute-forcing or compromising a session token. Vulnerability status: Confirmed ...
PT-2025-85: Insufficient access control in Fastwel PLC web server
The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. Exploitation of the vulnerability allows an attacker with an unprivileged account to gain the access to protected information. Vulnerability status: Confirmed by vendor Date of...
PT-2025-84: Insecure firmware update mechanism in Fastwel PLC web server
The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. Exploitation of the vulnerability allows a remote attacke with administrative permissions in the execution environment to upload a modified update archive and execute arbitrary cod...
PT-2025-83: Improper permission assignment to a critical resource in Fastwel PLC web server
The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. Exploitation of the vulnerability allows an attacker with administrative permissions in a restricted environment to execute arbitrary code in the operating system and escalate thei...
PT-2025-82: Insecure OS сommand execution mechanism in Fastwel PLC web server
The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. The discovered vulnerability allows a remote attacker to execute arbitrary operating system commands and escalate their privileges to superuser level by sending a POST request via ...
PT-2025-86: Disclosure of confidential data via controller configuration request in Fastwel PLC web server
The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. The discovered vulnerability can be exploited by an attacker to obtain administrator‑level privileges. Vulnerability status: Confirmed by vendor Date of vulnerability remediation:...
PT-2025-81: OS command injection in Fastwel PLC web server
The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. The discovered vulnerability is related to a failure to neutralize special elements used in operating system commands. Exploitation of this vulnerability allows a remote attacker t...
PT-2025-40263
Уязвимость встроенного программного обеспечения ПЛК Fastwel связанная с неверным сроком действия сеанса. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...
PT-2025-40261
Уязвимость встроенного программного обеспечения ПЛК Fastwel связана с неправильным присвоением разрешений для критичного ресурса. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации...
PT-2025-40262
Уязвимость встроенного программного обеспечения ПЛК Fastwel связана с раскрытием информации при передаче данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...
PT-2025-40264
Уязвимость встроенного программного обеспечения ПЛК Fastwel связана с переадресацией URL на ненадежный сайт. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, перенаправить пользователя на произвольный URL-адрес...
PT-2025-40260
Уязвимость встроенного программного обеспечения ПЛК Fastwel связана с загрузкой кода без проверки его целостности.Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, позволяющая нарушителю выполнить произвольный код...
PT-2025-40259
Уязвимость встроенного программного обеспечения ПЛК Fastwel связана с неправильным присвоением разрешений для критичного ресурса. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольные команды и повысить свои привилегии до уровня суперпользователя...