Stack Overflow Vulnerability in the Fl*** Method of the CenturyStar WebViewer.ocx Control

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. It is a real-time human-machine interface utility program generator, which consists of CSMaker development system and CSViewer operation system. There is a stack overflow...

Session fixation

An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from the same source IP address as an authenticated user, because this IP address is used as a session...

PT-2019-19836

Name of the Vulnerable Software and Affected Versions PHOENIX CONTACT FL NAT SMCS 8TX affected versions not specified PHOENIX CONTACT FL NAT SMN 8TX affected versions not specified PHOENIX CONTACT FL NAT SMN 8TX-M affected versions not specified PHOENIX CONTACT FL NAT SMN 8TX-M-DMG affected...

CVE-2019-9744: Session Fixation

An issue was discovered on PHOENIX CONTACT FL NAT SMCS 8TX, FL NAT SMN 8TX, FL NAT SMN 8TX-M, and FL NAT SMN 8TX-M-DMG devices. There is unauthorized access to the WEB-UI by attackers arriving from the same source IP address as an authenticated user, because this IP address is used as a session...

PHOENIX CONTACT RAD-80211-XD

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Phoenix Contact Equipment: RAD-80211-XD Vulnerability: Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute system level commands...

Phoenix Contact FL SWITCH Cross-Site Request Forgery Vulnerability

Phoenix Contact FL SWITCH is an industrial grade Ethernet switch from the Phoenix Contact group of companies in Germany. A cross-site request forgery vulnerability exists in Phoenix Contact FL SWITCH versions prior to 3xxx 1.35, 4xxx 1.35, and 48xx 1.35, which can be exploited by a remote attacke...

Phoenix Contact FL SWITCH Denial of Service Vulnerability

Phoenix Contact FL SWITCH is an industrial grade Ethernet switch from the Phoenix Contact group of companies in Germany. A denial of service vulnerability exists in Phoenix Contact FL SWITCH versions 3xxx prior to 1.35, 4xxx prior to 1.35, and 48xx prior to 1.35, which can be exploited to cause a...

PHOENIX CONTACT FL SWITCH

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: PHOENIX CONTACT Equipment: FL SWITCH Vulnerabilities: Cross-site Request Forgery, Improper Restriction of Excessive Authentication Attempts, Cleartext Transmission of Sensitive Information, Resourc...

PHOENIX CONTACT FL VIEW Detection (Windows SMB Login)

SMB login-based detection of PHOENIX CONTACT FL VIEW. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2018-14422

Name of the Vulnerable Software and Affected Versions Orange AirBox Y858 FL 01.16 04 Description The issue allows attackers to extract APN data, including name, number, username, and password, via the rand parameter in the "goform/getProfileList" API endpoint. Recommendations For Orange AirBox Y8...

PT-2018-14423

Name of the Vulnerable Software and Affected Versions Orange AirBox Y858 FL 01.16 04 Description The issue allows remote attackers to discover information about currently connected devices, including hostnames, IP addresses, MAC addresses, and connection time, by exploiting the...

PT-2018-14424

Name of the Vulnerable Software and Affected Versions Orange AirBox Y858 FL 01.16 04 Description The issue allows attackers to reset a router to factory settings by exploiting the goform/setReset endpoint, which can then be used to login using the default admin:admin credentials. Recommendations...

The vulnerability of FL SWITCH microprogrammed software for controlled switches arises from operations that go beyond the buffer boundaries in memory. This allows attackers to access device operating system files and execute arbitrary code.

The vulnerability of the microprogrammed software for controlled switches from FL SWITCH from Phoenix Contact arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to the device’s operating...

The vulnerability of the config_transfer.cgi and software_update.cgi components of FL SWITCH software for controlling switches allows a hacker to execute arbitrary commands.

The vulnerability of the configtransfer.cgi and softwareupdate.cgi components of the FL SWITCH software for controlling switches from Phoenix Contact is related to the absence of a mechanism to neutralize special elements in the input commands of the operating system. Exploiting this vulnerabilit...

Phoenix Contact managed FL SWITCH Command Injection Vulnerability

Phoenix Contact is a German provider of industrial automation, connectivity and interface solutions for critical infrastructure applications in industries such as communications, critical manufacturing and information technology. A command injection vulnerability exists in the Phoenix Contact...

Phoenix Contact managed FL SWITCH Buffer Overflow Vulnerability

Phoenix Contact is a German provider of industrial automation, connectivity and interface solutions for critical infrastructure applications in industries such as communications, critical manufacturing and information technology. A buffer overflow vulnerability exists in Phoenix Contact managed F...

PHOENIX CONTACT FL SWITCH 3xxx, 4xxx and 48xxx Series Stack Buffer Overflow Vulnerability

PHOENIX CONTACT FL SWITCH 3xxx, 4xxx and 48xxx Series are different series of switching devices from the Phoenix Contact Group. A stack buffer overflow vulnerability exists in the PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, and 48xxx Series products using firmware versions 1.0 through 1.32. A remote...

CVE-2018-10731

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies a different vulnerability than CVE-2018-10728...

Buffer overflow

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows when handling very large cookies a different vulnerability than CVE-2018-10728...

Buffer overflow

All Phoenix Contact managed FL SWITCH 3xxx, 4xxx, 48xx products running firmware version 1.0 to 1.33 are prone to buffer overflows a different vulnerability than CVE-2018-10731...