CVE-2017-12732

A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior. A function reads a packet to indicate the next packet length. The next packet length is not verified, allowing a buffer overwrite that could lead to an arbitrary remote code execution...

CVE-2017-12732

A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior. A function reads a packet to indicate the next packet length. The next packet length is not verified, allowing a buffer overwrite that could lead to an arbitrary remote code execution...

CVE-2017-12732

GE CIMPLICITY (HMI/SCADA) is affected by a Stack-based Buffer Overflow in CIMPLICITY versions 9.0 and prior. A function that reads the next packet length does not verify the length, allowing a buffer overwrite and potential arbitrary remote code execution (and device crash). Impact is described a...

CVE-2017-12732

A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior. A function reads a packet to indicate the next packet length. The next packet length is not verified, allowing a buffer overwrite that could lead to an arbitrary remote code execution...

GE CIMPLICITY

CVSS v3 8.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: GE Equipment: CIMPLICITY Vulnerability: Stack-based Buffer Overflow AFFECTED PRODUCTS The following versions of CIMPLICITY, an HMI/SCADA management platform, are affected: CIMPLICITY Versions 9.0 and prior. IMPACT...

GE CIMPLICITY (Update A)

CVSS v3 6.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: GE Equipment: CIMPLICITY Vulnerability: Stack-based Buffer Overflow UPDATED INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-17-278-01 GE CIMPLICITY that was published October 5,...

CVE-2017-8048: Cloud Controller API regression | Cloud Foundry

Severity Critical Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions capi-release versions 1.33.0 and later, prior to 1.42.0 cf-release versions 268 and later, prior to 274 Please note: due to a bug in 274, it is not recommended for production use. Deployments should use...

CVE-2015-3976

Cross-site scripting XSS vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multilink ML800/1200/1600/2400 4.2.1 and earlier...

Cross site scripting

Cross-site scripting XSS vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multilink ML800/1200/1600/2400 4.2.1 and earlier...

CVE-2015-3976 GE Multilink Cross-site Scripting

Cross-site scripting XSS vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multilink ML800/1200/1600/2400 4.2.1 and earlier...

CVE-2015-3976

The CVE-2015-3976 issue is a Cross-site Scripting (XSS) vulnerability affecting GE Multilink switches: ML800/1200/1600/2400 (firmware ≤ 4.2.1) and ML810/3000/3100 (firmware ≤ 5.2.0). The underlying problem is improper neutralization of input during web page generation in the switch web interface,...

GE Communicator Heap Buffer Overflow Vulnerability

GE Communicator is an application for authoring and monitoring metering equipment. A security vulnerability in the handling of the GE Communicator ActiveX control allows remote attackers to exploit the vulnerability to submit a special request to execute arbitrary code in the context of the...

GE Communicator

CVSS v3 7.6 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: GE Equipment: Communicator Vulnerability: Heap-Based Buffer Overflow AFFECTED PRODUCTS The following versions of Communicator, an application for programming and monitoring supported metering devices, are affected:...

Command injection

A Weak Cryptography for Passwords issue was discovered in General Electric GE Multilin SR 750 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 760 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 469 Motor Protection Relay, firmware versions prior to Versio...

CVE-2017-7905

A Weak Cryptography for Passwords issue was discovered in General Electric GE Multilin SR 750 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 760 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 469 Motor Protection Relay, firmware versions prior to Versio...

Design/Logic Flaw

Huawei AR1220 routers with software before V200R005SPH006 allow remote attackers to cause a denial of service board reset via vectors involving a large amount of traffic from the GE port to the FE port...

CVE-2015-2255

Huawei AR1220 routers with software before V200R005SPH006 allow remote attackers to cause a denial of service board reset via vectors involving a large amount of traffic from the GE port to the FE port...

CVE-2015-2255

Huawei AR1220 routers with software before V200R005SPH006 allow remote attackers to cause a denial of service board reset via vectors involving a large amount of traffic from the GE port to the FE port...

GE Multilin UR / URPlus / B95Plus Relay Web Interface Detection

Binary data scadagemultilinprotectionrelaywebdetect.nbin...

Bargo Travel Android App Has Arbitrary User Password Reset Vulnerability

Ba Ge Travel is a car time-sharing and leasing platform founded by Beijing Ba Ge Auto Leasing Co., Ltd. with the help of Internet of Things IoT technology and advanced operation mode, realizing the unattended, rent-and-return intelligent car mode, and is committed to providing users with 24-hour...