Delta Electronics Industrial Automation DOPSoft 缓冲区错误漏洞

DOPSoft is a Human Machine Interface HMI programming software from Delta Electronics. DOPSoft 4.0.8.21 and earlier versions suffer from an out-of-bounds write vulnerability when handling project files. An attacker could exploit this vulnerability to execute arbitrary code...

Win-911 mobile server platform privilege escalation vulnerability

Summary An exploitable local privilege elevation vulnerability exists in the file system permissions of the Mobile-911 Server V2.5 install directory. Depending on the vector chosen, an attacker can overwrite the service executable and execute arbitrary code with System privileges or replace other...

Win-911 Enterprise Platform privilege escalation vulnerability

Summary Multiple exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of the privileges when...

CVE-2020-12524

CVE-2020-12524 affects Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W (all versions). The issue is Uncontrolled Resource Consumption causing the devices to become unresponsive and fail to update display content (Denial of Service). Root cause described as resource exhaustion; attack vect...

Binary Vulnerability in TP Manager, HMI Software from Tengen Controls

The HMI software TP Manager is a software product of TENGCONTROL TECHNOLOGY China. A binary vulnerability exists in TP Manager, which can be exploited by attackers to cause a denial of service...

Vulnerability of software packages for monitoring and data collection: MC Works64/MC Works32, FrameWorX server, centralized configuration environment for HMI-/SCADA applications, Platform Services software platform, GenBroker64/GenBroker32 application for managing access rights. This vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure.

The vulnerabilities of the software packages for supervisory control and data collection, MC Works64/MC Works32, the FrameWorX server, the centralized configuration environment for HMI-/SCADA applications, the Platform Services software platform, and the GenBroker64/GenBroker32 application for...

Advantech WebAccess HMI Runtime suffers from stack overflow vulnerability (CNVD-2020-61110)

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. A stack overflow vulnerability exists in Advantech WebAccess HMI Runtime, which can be exploited by an attacker to cause a denial of service on the server...

Heap Overflow Vulnerability in Advantech WebAccess HMI Runtime (CNVD-2020-61112)

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. A heap overflow vulnerability exists in Advantech WebAccess HMI Runtime, which can be exploited by an attacker to cause a denial of service on the server...

Advantech WebAccess HMI Designer suffers from dll Hijacking Vulnerability

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. Advantech WebAccess HMI Designer suffers from a dll hijacking vulnerability that can be exploited by attackers to gain administrator privileges...

Integer Overflow Vulnerability in Advantech WebAccess HMI PanelSim.exe

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. An integer overflow vulnerability exists in Advantech WebAccess HMI PanelSim.exe, which can be exploited by an attacker to cause an integer overflow, resulting in a program crash...

Advantech WebAccess HMI PanelSim.exe suffers from a stack overflow vulnerability (CNVD-2020-61115)

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. A stack overflow vulnerability exists in Advantech WebAccess HMI PanelSim.exe, which can be exploited by an attacker to cause a denial of service on the server...

Advantech WebAccess HMI Designer suffers from dll hijacking vulnerability (CNVD-2020-61113)

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. Advantech WebAccess HMI Designer suffers from a dll hijacking vulnerability that can be exploited by attackers to gain administrator privileges...

Binary Vulnerability in Advantech WebAccess HMI Runtime (CNVD-2020-61111)

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. A binary vulnerability exists in Advantech WebAccess HMI Runtime, which can be exploited by attackers to cause a denial of service to the server...

Binary Vulnerability in Advantech WebAccess HMI PanelSim.exe

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. A binary vulnerability exists in Advantech WebAccess HMI PanelSim.exe, which can be exploited by attackers to cause a denial of service on the server...

Integer Overflow Vulnerability in Advantech WebAccess HMI Runtime (CNVD-2020-61109)

Advantech WebAccess/HMI Designer is an integrated human-machine interface development tool. An integer overflow vulnerability exists in Advantech WebAccess HMI Runtime, which can be exploited by an attacker to cause a denial of service on the server. The vulnerability can be exploited by an...

ICSMA-20-261-01_Philips Clinical Collaboration Platform

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Low skill level to exploit Vendor: Philips Equipment: Clinical Collaboration Platform Vulnerabilities: Cross-site Request Forgery, Improper Neutralization of Script in Attributes in a Web Page, Protection Mechanism Failure, Algorithm Downgrade,...

Advantech WebAccess Node

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Advantech Equipment: WebAccess Node Vulnerability: Incorrect Permission Assignment for Critical Resource 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to escalate their...

CVE-2020-15786

A vulnerability has been identified in SIMATIC HMI Basic Panels 2nd Generation incl. SIPLUS variants All versions V16, SIMATIC HMI Comfort Panels incl. SIPLUS variants All versions = V16, SIMATIC HMI Mobile Panels All versions = V16, SIMATIC HMI Unified Comfort Panels All versions = V16. Affected...

CVE-2020-15786

A vulnerability has been identified in SIMATIC HMI Basic Panels 2nd Generation incl. SIPLUS variants All versions V16, SIMATIC HMI Comfort Panels incl. SIPLUS variants All versions = V16, SIMATIC HMI Mobile Panels All versions = V16, SIMATIC HMI Unified Comfort Panels All versions = V16. Affected...

CVE-2020-15787

A vulnerability has been identified in SIMATIC HMI Unified Comfort Panels All versions = V16. Affected devices insufficiently validate authentication attempts as the information given can be truncated to match only a set number of characters versus the whole provided string. This could allow a...