EUVD-2025-199131

Malicious code in kinetix-default-token-list npm...

Malicious code in kinetix-default-token-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834c5a1d0acc5be073a1939708bfdfdb3d38a411407c9ac4e2abebdfd44ee059 The package kinetix-default-token-list was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191117 Malicious code in kinetix-default-token-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834c5a1d0acc5be073a1939708bfdfdb3d38a411407c9ac4e2abebdfd44ee059 The package kinetix-default-token-list was found to contain malicious code. Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

EUVD-2023-33769

Malicious code in bioql PyPI...

EUVD-2023-24036

Malicious code in bioql PyPI...

CVE-2023-1834

Rockwell Automation was made aware that Kinetix 5500 drives, manufactured between May 2022 and January 2023, and are running v7.13 may have the telnet and FTP ports open by default. This could potentially allow attackers unauthorized access to the device through the open ports...

The vulnerability of the Microprogrammed Servo Device Software of Kinetix 5700 A, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of the Kinetix 5700 A servo-controller’s microprogramming software is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Rockwell Automation Kinetix 5700 Denial of Service Vulnerability

The Rockwell Automation Kinetix 5700 is the first Kinetix drive from Rockwell Automation designed with an external common AC/DC bus connection system. It reduces hardware requirements and allows for seamless expansion, using a single platform for single- or multi-axis systems. A denial of service...

CVE-2023-2263

The Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A is vulnerable to CIP fuzzing. The new ENIP connections cannot be established if impacted by this vulnerability, which prohibits operational capabilities of the device resulting in a denial-of-service attack...

CVE-2023-2263

The Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A is vulnerable to CIP fuzzing. The new ENIP connections cannot be established if impacted by this vulnerability, which prohibits operational capabilities of the device resulting in a denial-of-service attack...

Design/Logic Flaw

The Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A is vulnerable to CIP fuzzing. The new ENIP connections cannot be established if impacted by this vulnerability, which prohibits operational capabilities of the device resulting in a denial-of-service attack...

CVE-2023-2263

CVE-2023-2263 affects the Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A. Vulnerability stems from CIP fuzzing that prevents establishing new ENIP connections, leading to operation disruption and a denial-of-service on the device. According to multiple sources, CVSSv3 base score is...

CVE-2023-2263 Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A – CIP Message Attack Could Cause Denial-Of-Service

The Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A is vulnerable to CIP fuzzing. The new ENIP connections cannot be established if impacted by this vulnerability, which prohibits operational capabilities of the device resulting in a denial-of-service attack...

CVE-2023-2263 Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A – CIP Message Attack Could Cause Denial-Of-Service

The Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A is vulnerable to CIP fuzzing. The new ENIP connections cannot be established if impacted by this vulnerability, which prohibits operational capabilities of the device resulting in a denial-of-service attack...

CISA Releases Seven Industrial Control Systems Advisories

CISA released seven Industrial Control Systems ICS advisories on July 18, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-199-01 Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A ICSA-23-199-02...

Rockwell Automation Kinetix 5700 DC Bus Power Supply

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: Kinetix 5700 Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could result in a denial-of-service attack...

Rockwell Automation Kinetix 5700 资源管理错误漏洞

The Rockwell Automation Kinetix 5700 is the first Kinetix drive from Rockwell Automation designed with an external common AC/DC bus connection system. It reduces hardware requirements and allows for seamless expansion, using a single platform for single- or multi-axis systems. A denial of service...

PT-2023-18597 · Rockwell Automation · Kinetix 5700 Dc Bus Power Supply Series A

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A affected versions not specified Description: The issue concerns a vulnerability to CIP fuzzing, which affects the establishment of new ENIP connections. If impacted, this...

The vulnerability of the microprogrammed servo system software of Kinetix 5500 allows a intruder to gain unauthorized access to the device.

The vulnerability of the Kinetix 5500 servo-controller software-related microprogramming systems is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder, operating locally, to gain unauthorized access to the device using network protocols like telnet or...