CVE-2019-6820: Missing Authentication for Critical Function

A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration IP address, network mask and gateway IP address when a specific Ethernet frame is received in all versions of: Modicon M100, Modicon M200, Modicon M221, ATV IMC...

Siemens SIPLUS NET CP443-1 ADVANCED Communications Adapter Detection

Binary data 750306.prm...

Rockwell Automation/Allen-Bradley Multiple Devices Authentication Bypass (ICSA-18-310-02)

Binary data 720141.prm...

Siemens SIPLUS NET CP443-1 Communications Adapter Detection

Binary data 750305.prm...

PT-2019-18180

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 14.0.0 through 14.0.0.2 F5 BIG-IP versions 13.0.0 through 13.1.0.7 F5 BIG-IP versions 12.1.0 through 12.1.3.5 F5 BIG-IP versions 11.6.1 through 11.6.3.2 F5 BIG-IP versions 11.5.1 through 11.5.8 F5 Enterprise Manager version...

ABB IP Configuration Tool Detection (Windows SMB Login)

Detects the installed version of ABB IP Configuration Tool for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-15333

On versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's user with any role, including Guest Role, to have access and download previously generated and available snapshot files on the BIG-IP configuration utility such as QKView and TCPDumps...

CVE-2018-17924

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...

CVE-2018-17924

CVE-2018-17924 affects Rockwell Automation MicroLogix 1400 Controllers (Series A/B/C) and 1756 ControlLogix EtherNet/IP Communications Modules. The vulnerability allows an unauthenticated remote actor to initiate a CIP connection and push a new IP configuration, potentially disrupting system comm...

CVE-2018-17924

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...

PT-2018-2759

Name of the Vulnerable Software and Affected Versions Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules affected versions not specified Description The issue is related to a lack of authentication for a critical function in the MicroLogix 1400 and 1756...

CVE-2018-17924: Missing Authentication for Critical Function

Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An unauthenticated, remote threat actor could send a CIP connection request to an affected device, and upon successful connection, send a new IP configuration to the affected device even if the controller...

F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K00363258)

A local file vulnerability exists in the BIG-IP Configuration utility that exposes files containing F5-provided data only, and do not include configuration data, proxied traffic, or other potentially sensitive customer data. CVE-2018-5525 Impact Authenticated users may be able to retrieve files...

PT-2018-12972

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 14.0.0 through 14.0.0.2 F5 BIG-IP versions 13.0.0 through 13.1.1.1 F5 Enterprise Manager version 3.1.1 Description The issue affects authenticated administrative users who run commands in the Traffic Management User Interfac...

PT-2018-17019

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Configuration utility versions 11.2.1, 11.5.1 through 11.5.5, 11.6.1 through 11.6.3.1, 12.1.0 through 12.1.2, 13.0.0 Description A local file issue exists in the F5 BIG-IP Configuration utility that exposes files containing F5-provid...

PT-2018-17005

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 13.0.0 F5 BIG-IP versions 13.1.0 through 13.1.0.3 Description The issue affects authenticated administrative users who execute commands in the Traffic Management User Interface TMUI, also known as the BIG-IP Configuration...

XenServer 6.5 - VM IP configuration switches back to DHCP

XenServer 6.5 - VM IP configuration switches back to DHCP...

Cannot change the IP address of the XenMobile server on VMware

Cannot change the IP address of the XenMobile server on VMWare. This mostly arises in the following scenario. Customer clones a XenMobile Server for a cluster, then changes the IP address of the clone in the CLI, reboots the cloned XenMobile Server and the IP reverts back to the IP of the origina...

CVE-2014-8384

The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which allows remote attackers to modify the DHCP server and device IP configuration, reboot the device, change the device name, and have other unspecified impact via a crafted request...

Cross site request forgery (csrf)

The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which allows remote attackers to modify the DHCP server and device IP configuration, reboot the device, change the device name, and have other unspecified impact via a crafted request...