1219 matches found
Schneider-electric Modicon Improper Check for Unusual or Exceptional Conditions
A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a Denial of Service when sending invalid breakpoint parameters to the controller over Modbus File data ot500315.nasl...
Yokogawa Controller Asset Information
This plugin returns asset information for a Yokogawa controller. File data ot500020.nasl...
Siemens Simatic Unspecified Vulnerability
Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service defect-mode transition via crafted ISO-TSAP packets, a different vulnerability than CVE-2014-2257. File data ot500263.nasl...
Schneider-electric Modicon Authentication Bypass by Capture-replay
An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product all references, all versions prior to firmware V1.6.2.0. The vulnerability allows unauthorized users to replay authentication sequences. If an attacker exploits this vulnerability and connects to a...
Omron Controller Asset Information
This plugin returns asset information for a Omron controller. File data ot500011.nasl...
Rockwellautomation Powermonitor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Rockwell Automation Allen-Bradley PowerMonitor 1000 all versions. A remote attacker could inject arbitrary code into a targeted userâ??s web browser to gain access to the affected device. File data ot500118.nasl...
Windriver Vxworks Unspecified Vulnerability
Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report. File data ot500056.nasl...
Siemens Controller Asset Information
This plugin returns asset information for a Siemens controller. File data ot500015.nasl...
Rockwellautomation Rslinx Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in OPCTest.exe in Rockwell Automation RSLinx Classic before 3.73.00 allows remote attackers to execute arbitrary code via a crafted CSV file. File data ot500113.nasl...
Schneider-electric Modicon Unspecified Vulnerability
The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules allows remote authenticated users to send Modbus messages, and consequently execute arbitrary code, by embedding these messages in SOAP HTTP POST requests...
Windriver Vxworks Improper Restriction of Operations within the Bounds of a Memory Buffer
Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component issue 3 of 4. This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect to a remote host. File data ot500203.nasl...
Siemens Simatic Unspecified Vulnerability
Siemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMATIC S7-300 Profinet-disabled CPU devices with firmware before 3.3.12 allow remote attackers to cause a denial of service defect-mode transition via crafted 1 ISO-TSAP or 2 Profibus packets. File data...
Siemens Simatic Unspecified Vulnerability
The random-number generator on Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors, a different vulnerability than...
Schneider-electric Modicon Improper Authentication
Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors. File data ot500033.nasl...
Rockwellautomation Micrologix Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN 15.003 allows remote attackers to execute arbitrary code via unspecified vectors. File data ot500134.nasl...
Rockwellautomation Factorytalk Unspecified Vulnerability
Unspecified vulnerability in Rockwell Automation FactoryTalk Diagnostics Viewer before V2.30.00 CPR9 SR3 allows local users to execute arbitrary code via a crafted FactoryTalk Diagnostics Viewer .ftd configuration file, which triggers memory corruption. File data ot500026.nasl...
Mitsubishi Controller Asset Information
This plugin returns asset information for a Mitsubishi controller. File data ot500010.nasl...
Digiboard Controller Asset Information
This plugin returns asset information for a Digiboard controller. File data ot500003.nasl...
Mitsubishi_electric Qj71e71-100 Unspecified Vulnerability
An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versions. The affected Ethernet interface module is connected to a MELSEC-Q PLC, which may allow a remote attacker to conne...