Siemens CP 243-1 IT FTP Server Detection

Binary data 700215.prm...

Siemens CP 243-1 FTP Server Detection

Binary data 700214.prm...

Siemens CP 343-1 FTP Server Detection

Binary data 700217.prm...

Siemens CP 343-1 Advanced FTP Server Detection

Binary data 700218.prm...

Siemens CP 343-1 Lean FTP Server Detection

Binary data 700216.prm...

Siemens SIMATIC CP Device Detection (FTP)

This script performs FTP based detection of Siemens SIMATIC CP devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ruby: Command injection

Background Ruby is an interpreted object-oriented programming language. The elaborate standard library includes an HTTP server “WEBRick” and a class for XML parsing “REXML”. Description A command injection flaw was discovered in Net::FTP which impacts Ruby. Impact A remote attacker, by enticing a...

Design/Logic Flaw

A flaw in libxml2 allows remote XML entity inclusion with default parser flags i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loading, or default DTD attributes. Depending on the context, this may expose a higher-risk attack surface in libxml2 not...

AEF CMS v1.0.9 - (PM) Persistent Cross Site Vulnerability

Document Title: =============== AEF CMS v1.0.9 - PM Persistent Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2123 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-13000 CVE-ID: ======= CVE-2018-13000 Release Date:...

AEF CMS v1.0.9 - (PM) Persistent Cross Site Vulnerability

Document Title: =============== AEF CMS v1.0.9 - PM Persistent Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2123 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-13000 CVE-ID: ======= CVE-2018-13000 Release Date:...

PRUFTECHNIK VIBNODE Detection (FTP)

The script sends a FTP connection request to the remote host and attempts to detect the presence of a PRUFTECHNIK VIBNODE device and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Improper access control

An Improper Access Control issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The FTP server on the pump does not require authentication if the pump is configured to allow FTP connections...

CVE-2017-12724

A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The FTP server on the pump contains hardcoded credentials, which are not fully initialized. The FTP server is only accessible if the pump is configured ...

CVE-2017-12720

An Improper Access Control issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The FTP server on the pump does not require authentication if the pump is configured to allow FTP connections...

Hardcoded credentials

A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The FTP server on the pump contains hardcoded credentials, which are not fully initialized. The FTP server is only accessible if the pump is configured ...

CVE-2017-12720

CVE-2017-12720 affects the Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump (firmware versions 1.1, 1.5, 1.6). The root cause is an improper access control in the FTP server, which does not require authentication when FTP is enabled, allowing remote unauthorized access to the device. ...

CVE-2017-12720

An Improper Access Control issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The FTP server on the pump does not require authentication if the pump is configured to allow FTP connections...

CVE-2017-12724

CVE-2017-12724 affects Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump (firmware versions 1.1, 1.5, 1.6). The vulnerability stems from hard-coded credentials on the pump’s FTP server, which is only accessible when FTP is enabled, enabling unauthorized access to the device. The ICS-CE...

CVE-2017-12724

A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The FTP server on the pump contains hardcoded credentials, which are not fully initialized. The FTP server is only accessible if the pump is configured ...

PRUFTECHNIK VIBNODE Detection Consolidation

Consolidation of PRUFTECHNIK VIBNODE device detections. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...