Lucene search
+L

1639 matches found

Positive Technologies
Positive Technologies
added 2021/11/30 12:00 a.m.14 views

PT-2021-5415 · Mitsubishi · Melsec Iq-R Series R00/01/02Cpu +18

Name of the Vulnerable Software and Affected Versions: MELSEC iQ-R Series R00/01/02CPU versions 24 and prior MELSEC iQ-R Series R04/08/16/32/120ENCPU versions 57 and prior MELSEC iQ-R Series R08/16/32/120SFCPU all versions MELSEC iQ-R Series R08/16/32/120PCPU versions 29 and prior MELSEC iQ-R...

7.8CVSS7.4AI score0.02988EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2021/11/30 12:00 a.m.11 views

多款Mitsubishi Electric产品安全漏洞

Mitsubishi Electric MELSEC-Q Series and others are products of Mitsubishi Electric, Japan.Mitsubishi Electric MELSEC-Q Series is a programmable logic controller of MELSEC-Q series.Mitsubishi Electric MELSEC-L Series is a programmable logic controller of MELSEC-L series. Mitsubishi Electric MELSEC...

7.8CVSS7.3AI score0.03077EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/11/30 12:00 a.m.10 views

Mitsubishi Electric MELSEC iQ-R series 输入验证错误漏洞

The Mitsubishi Electric MELSEC iQ-R series is a programmable logic controller from Mitsubishi Electric Japan. An input validation error vulnerability exists in the Mitsubishi Electric MELSEC iQ-R series, which arises from a lack of proper control over the allocation and maintenance of finite...

7.8CVSS7.3AI score0.02988EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2021/11/30 12:00 a.m.17 views

PT-2021-5339 · Mitsubishi · Melipc Series +3

Name of the Vulnerable Software and Affected Versions: MELSEC iQ-R Series R00/01/02CPU versions 24 and prior MELSEC iQ-R Series R04/08/16/32/120ENCPU versions 57 and prior MELSEC iQ-R Series R08/16/32/120SFCPU versions 28 and prior MELSEC iQ-R Series R08/16/32/120PCPU versions 29 and prior MELSEC...

7.8CVSS7.3AI score0.03077EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2021/11/30 12:00 a.m.13 views

PT-2021-5309 · Mitsubishi · Melipc Series +3

Name of the Vulnerable Software and Affected Versions: MELSEC iQ-R Series R00/01/02CPU versions 24 and prior MELSEC iQ-R Series R04/08/16/32/120ENCPU versions 57 and prior MELSEC iQ-R Series R08/16/32/120SFCPU versions 28 and prior MELSEC iQ-R Series R08/16/32/120PCPU versions 29 and prior MELSEC...

7.8CVSS7.5AI score0.03077EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/11/30 12:00 a.m.9 views

Mitsubishi Electric MELSEC Q series 资源管理错误漏洞

The Mitsubishi Electric MELSEC Q series is a programmable logic controller from Mitsubishi Electric Japan. A resource management error vulnerability exists in the Mitsubishi Electric MELSEC Q series, which can be exploited by attackers to perform denial of service attacks. The following products...

7.8CVSS7.3AI score0.03077EPSS
SaveExploits0References7
Prion
Prion
added 2021/11/14 9:15 p.m.33 views

Code injection

The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user via remote HTTP requests that insert this code into a log file and then traverse to that file...

10CVSS9.5AI score0.35047EPSS
SaveExploits5References2Affected Software1
Cvelist
Cvelist
added 2021/11/14 8:08 p.m.67 views

CVE-2020-16152

The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user via remote HTTP requests that insert this code into a log file and then traverse to that file...

9.7AI score0.35047EPSS
SaveExploits5References2
CVE
CVE
added 2021/11/14 8:08 p.m.160 views

CVE-2020-16152

The CVE-2020-16152 entry refers to Aerohive/Extreme Networks HiveOS NetConfig, where the NetConfig UI is vulnerable to local file inclusion (LFI) paired with log-poisoning to achieve unauthenticated remote code execution as root. Affected are HiveOS IQ Engine and NetConfig interfaces through 10.0...

10CVSS9.5AI score0.35047EPSS
SaveExploits5References2Affected Software1
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.40 views

F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability

F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services...

10CVSS9.6AI score0.99898EPSS
SaveIn wildExploits20
NVD
NVD
added 2021/10/14 3:15 p.m.63 views

CVE-2021-20599

Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU firmware versions "11" and prior allows a...

9.1CVSS0.01402EPSS
SaveExploits0References3
Prion
Prion
added 2021/10/14 3:15 p.m.25 views

Default credentials

Cleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU all versions allows a remote unauthenticated attacker to login to a target CPU module by...

5CVSS7.4AI score0.01402EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/10/14 12:00 a.m.8 views

Mitsubishi Electric MELSEC iQ-R series 安全漏洞

Mitsubishi Electric MELSEC iQ-R series is a programmable logic controller from Mitsubishi Electric Japan. A security vulnerability exists in the Mitsubishi Electric MELSEC iQ-R series series Secure CPU R08/16/32/120SFCPU and the MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU, which can b...

9.1CVSS7.3AI score0.01402EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2021/10/14 12:00 a.m.16 views

CVE-2021-20599

Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU firmware versions "11" and prior allows a...

9.1CVSS6.7AI score0.01402EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/10/14 12:00 a.m.10 views

PT-2021-8029 · Mitsubishi · Melsec Iq-R Series Sil2 Process Cpu +1

Name of the Vulnerable Software and Affected Versions: MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU versions prior to 26 MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU versions prior to 11 Description: The issue is related to the transmission of credentials in an unencrypted form,...

9.1CVSS7.2AI score0.01402EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2021/10/14 12:00 a.m.51 views

CVE-2021-20599

Cleartext Transmission of Sensitive InformationCleartext transmission of sensitive information vulnerability in MELSEC iQ-R series Safety CPU R08/16/32/120SFCPU firmware versions "26" and prior and MELSEC iQ-R series SIL2 Process CPU R08/16/32/120PSFCPU firmware versions "11" and prior allows a...

9.1CVSS9.3AI score0.01402EPSS
SaveExploits0References3
CVE
CVE
added 2021/10/14 12:00 a.m.97 views

CVE-2021-20599

CVE-2021-20599 affects Mitsubishi Electric MELSEC iQ-R Series: vulnerable components are Safety CPU R08/16/32/120SFCPU with firmware versions prior to 27 and SIL2 Process CPU R08/16/32/120PSFCPU prior to 11. The issue is cleartext transmission of credentials, allowing a remote unauthenticated att...

9.1CVSS7.4AI score0.01402EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2021/10/08 5:15 p.m.32 views

CVE-2021-20600

Uncontrolled resource consumption in Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V Firmware Versions "16" and prior allows a remote unauthenticated attacker to cause a denial-of-service DoS condition by sending a large number of packets in a short time while the module...

7.1CVSS0.02385EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/10/08 5:15 p.m.8 views

CVE-2021-20600

Uncontrolled resource consumption in Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V Firmware Versions "16" and prior allows a remote unauthenticated attacker to cause a denial-of-service DoS condition by sending a large number of packets in a short time while the module...

7.1CVSS6.3AI score0.02385EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2021/10/08 4:42 p.m.43 views

CVE-2021-20600

Uncontrolled resource consumption in Mitsubishi Electric MELSEC iQ-R series C Controller Module R12CCPU-V Firmware Versions "16" and prior allows a remote unauthenticated attacker to cause a denial-of-service DoS condition by sending a large number of packets in a short time while the module...

6AI score0.02385EPSS
SaveExploits0References3
Rows per page
Query Builder