33 matches found
Schneider Electric Modicon M340 Path Traversal Vulnerability
The Schneider Electric Modicon M340 is a medium range PLC Programmable Logic Controller for industrial processes and infrastructure from Schneider Electric, France. A path traversal vulnerability exists in the Web Server on Modicon M340 that stems from improperly restricting the pathname of a...
Industrial Control Device Vulnerability in Mitsubishi Q06UDEHCPU
Q06UDEHCPU series PLC is Mitsubishi's medium and large PLC series products, Q series PLC adopts a modular structure, the composition of the series of products and the size of the flexible and variable. Mitsubishi Q06UDEHCPU has an industrial control device vulnerability that can be exploited by...
Industrial Control Device Vulnerability in CJ2M-CPU11 at Omron Automation (China) Co.
The OMRON Group is a manufacturer of automation control and electronic equipment. A vulnerability exists in CJ2M-CPU11 of Omron Automation China Co. for industrial control devices. An attacker could exploit the vulnerability to cause control functions to stop, resulting in production interruption...
Denial of Service Vulnerability in Schneider M340
The Schneider M340 is a controller with a wide range of applications in industrial control. A denial of service vulnerability exists in the Schneider M340, which can be exploited by an attacker to cause a denial of service to the server...
Vulnerability Spotlight: Code execution vulnerability in 3S CODESYS
Carl Hurd of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered an exploitable code execution vulnerability in 3S’ CODESYS Control SoftPLC runtime system. The system allows any embedded or PC device to convert into an IEC 61131-3-complaint industria...
3S-Smart Software Solutions GmbH CODESYS Runtime PLC_Task Code Execution Vulnerability
Summary An exploitable code execution vulnerability exists in the PLCTask functionality of 3S-Smart Software Solutions GmbH CODESYS Runtime 3.5.14.30. A specially crafted network request can cause remote code execution. An attacker can send a malicious packet to trigger this vulnerability. Tested...
Denial of Service Vulnerability in GE Fanuc SERIES90-30 IC693CMM321
The GE Fanuc SERIES90-30 IC693CMM321 is comprised of a series of controllers, input/output systems, and a variety of specialized templates that are suitable for a wide range of control needs in the industrial field. A denial of service vulnerability exists in GE Fanuc SERIES90-30 IC693CMM321, whi...
WAGO e!Cockpit network communication cleartext transmission vulnerability
Summary A cleartext transmission vulnerability exists in the network communication functionality of WAGO e!Cockpit, version 1.5.1.1. An attacker with access to network traffic can easily intercept, interpret, and manipulate data coming from, or destined for e!Cockpit. This includes passwords,...
Denial of service vulnerability in schneider M580 (CNVD-2020-04561)
Schneider Electric SA is a global electrical company headquartered in France. A denial of service vulnerability exists in schneider M580, which can be exploited by an attacker to cause a denial of service...
WAGO e!Cockpit authentication hard-coded encryption key vulnerability
Summary A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit, version 1.5.1.1. An attacker with access to communications between e!Cockpit and CoDeSyS Gateway can trivially recover the password of any user attempting to log in, in plain text. Test...
CVE-2018-19615
Rockwell Automation Allen-Bradley PowerMonitor 1000 all versions. A remote attacker could inject arbitrary code into a targeted userâs web browser to gain access to the affected device...
Major Security Vulnerability Found In Schneider Electric ICS Gear
Schneider Electric is grappling with a critical vulnerability found in its flagship industrial controller management software called Unity Pro that allows hackers to remotely execute code on industrial networks. The warning comes from Indegy, an industrial cybersecurity firm. Indegy discovered th...
The vulnerability of the ABB PCM600 control and configuration device allows a intruder to access information related to user account data.
The vulnerability of the ABB PCM600 control and configuration device lies in the way authentication information is stored in a database, in the form of hexadecimal ASCII values. Exploiting this vulnerability could allow an attacker, operating locally, to gain access to information about user...