1219 matches found
Tridium Niagara Improper Authentication
An attacker can log into the local Niagara platform Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and prior using a disabled account name and a blank password, granting the attacker administrator access to the Niagara system. File data ot500381.nasl...
CVE-2019-20816
An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference during the parsing of file data...
CVE-2019-20820
An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data...
Null pointer dereference
An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference during the parsing of file data...
Null pointer dereference
An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data...
CVE-2019-20820
An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data...
Abb Relion Improper Input Validation
An attacker may use a specially crafted message to force Relion 650 series versions 1.3.0.5 and prior or Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior to reboot, which could cause a denial of service. File data ot500358.nasl...
Beckhoff Twincat Improper Resource Shutdown or Release
When a Beckhoff TwinCAT Runtime receives a malformed UDP packet, the ADS Discovery Service shuts down. Note that the TwinCAT devices are still performing as normal. This issue affects TwinCAT 2 version 2304 and prior and TwinCAT 3.1 version 4204.0 and prior. File data ot500343.nasl...
Schneider-electric Modicon Improper Check for Unusual or Exceptional Conditions
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium see security notification for specific versions which could cause a Denial of Service when writing specific physical memory blocks using Modbus TCP...
Beckhoff Bk9000 Uncontrolled Resource Consumption
A Denial-of-Service vulnerability exists in BECKHOFF Ethernet TCP/IP Bus Coupler BK9000. After an attack has occurred, the device's functionality can be restored by rebooting. File data ot500372.nasl...
Rockwellautomation Arena Access of Resource Using Incompatible Type ('Type Confusion')
A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena...
Schneider-electric Modicon Improper Check for Unusual or Exceptional Conditions
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium see security notification for specific versions which could cause a Denial of Service of the controller when reading specific memory blocks using...
Schneider-electric Ecostruxure Incorrect Authorization
An Improper Authorization - CWE-285 vulnerability exists in EcoStruxure™ Control Expert V14.0 and all versions of Unity Pro previously calledEcoStruxure™ Control Expert, which could allow a bypass of the authentication process between EcoStruxure Control Expert and the controller. File data...
Rockwellautomation Rslinx Incorrect Permission Assignment for Critical Resource
In Rockwell Automation RSLinx Classic versions 4.1.00 and prior, an authenticated local attacker could modify a registry key, which could lead to the execution of malicious code using system privileges when opening RSLinx Classic. File data ot500374.nasl...
Siemens Siprotec Improper Input Validation
A vulnerability has been identified in SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modules All versions. Specially crafted packets sent to port 50000/UDP of the EN100 Ethernet communication modules could cause a Denial-of-Service of the affected device. A...
Beckhoff Embedded Unspecified Vulnerability
Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification ADS TwinCAT components do not restrict the number of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack. File data ot500332.nasl...
Beckhoff Twincat Use of a Broken or Risky Cryptographic Algorithm
Beckhoff TwinCAT 3 supports communication over ADS. ADS is a protocol for industrial automation in protected environments. This protocol uses user configured routes, that can be edited remotely via ADS. This special command supports encrypted authentication with username/password. The encryption...
Beckhoff Twincat Improper Restriction of Operations within the Bounds of a Memory Buffer
Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which triggers an out-of-bounds read. File data ot500331.nasl...
Rockwellautomation Micrologix Use of a Broken or Risky Cryptographic Algorithm
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic function utilized to protect the password in MicroLogix is discoverable. File data ot500367.nasl...
Beckhoff Embedded Unspecified Vulnerability
Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification ADS TwinCAT components might allow remote attackers to obtain access via the 1 Windows CE Remote Configuration Tool, 2 CE Remote Display service, or 3 TELNET service. File data ot500333.nasl...