Rockwell Automation Stratix 5900 Services Router < 15.7 Improper Input Validation and Resource Management (ICSA-18-107-03)

Binary data 720296.prm...

Rockwell Automation MicroLogix 1100 <= 16.0 and MicroLogix 1400 <= 21.003 Improper Authentication (ICSA-18-095-01)

Binary data 720294.prm...

Rockwell Automation PanelView Plus 6 700-1500 <= 9.0 Missing Authorization (ICSA-17-157-01)

Binary data 720293.prm...

Rockwell Automation Stratix 5100 Wireless Access Point and Workgroup Bridge < 15.4 Reusing a Nonce (ICSA-17-299-02)

Binary data 720291.prm...

Rockwell Automation Stratix and ArmorStratix Switches < 15.3 IOS SNMP Remote Code Execution (ICSA-17-208-04)

Binary data 720289.prm...

Rockwell Automation Stratix 5900 Services Router < 15.6.3 Improper Input Validation, Authentication and Path Traversal (ICSA-17-094-04)

Binary data 720283.prm...

Siemens SIMATIC HMI Panels and TIA Portal <= v15.1 Update 1 Hardcoded Credentials (ICSA-19-134-09)

Binary data 720274.prm...

Siemens SIMATIC HMI Panels and TIA Portal <= v15.1 Update 1 XSS (ICSA-19-134-09)

Binary data 720276.prm...

Wind River VxWorks (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Wind River Equipment: VxWorks Vulnerabilities: Stack-based Buffer Overflow, Heap-based Buffer Overflow, Integer Underflow, Improper Restriction of Operations within the Bounds of a Memory Buffer,...

Siemens SCALANCE X-200 < v5.2.4, XP/XC/XF-200 < v4.1, X-300 all versions (ICSA-19-085-01)

Binary data 720273.prm...

Siemens SIMATIC PCS 7 <= V9.0 and TIA Portal <= 15 SQL Injection DoS (ICSA-19-134-08)

Binary data 720262.prm...

Siemens SIMATIC PCS 7 <= V9.0 and TIA Portal <= 15 SQL Injection RCE (ICSA-19-134-08)

Binary data 720263.prm...

Siemens SIMATIC PCS 7 <= V9.0 and TIA Portal <= 15 SQL Injection (ICSA-19-134-08)

Binary data 720261.prm...

Rockwell Automation/Allen-Bradley CompactLogix and Compact GuardLogix <= 30.014 Improper Input Validation (ICSA-18-172-02)

Binary data 720132.prm...

Rockwell Automation/Allen-Bradley MicroLogix 1100 Controllers Denial of Service (ICSA-17-138-03)

Binary data 720131.prm...

Rockwell Automation/Allen-Bradley Multiple Devices Authentication Bypass (ICSA-18-310-02)

Binary data 720141.prm...

Rockwell Automation ControlLogix 5580 and CompactLogix 5380 Resource Exhaustion (ICSA-17-094-05)

Binary data 720113.prm...

Delta Electronics Delta Industrial Automation COMMGR 1.08 - Stack Buffer Overflow (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Delta Electronics Delta Industrial Automation COMMGR 1.08 Stack Buffer Overflow', 'Description' = %q This module exploits a stack based buffer...

DNP3 Implementation Vulnerability (Update B)

OVERVIEW This updated advisory is a follow-up to the updated advisory titled ICSA-13-291-01A DNP3 Implementation Vulnerability that was published November 21, 2013, on the NCCIC/ICS-CERT web site. Adam Crain of Automatak and Chris Sistrunk, Sr. Consultant for Mandiant, reported an improper input...

Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway Privilege Escalation

Summary RSLinx Classic is a software platform that allows Logix5000 Programmable Automation Controllers to connect to a wide variety of Rockwell Software applications, and FactoryTalk Linx Gateway is a software that provides an Open Platform Communications OPC Unified Architecture UA server...