164 matches found
Denial of Service Vulnerability in MITSUBISHI PLCs
MITSUBISHI PLC is a programmable controller product of Mitsubishi Electric Japan. A denial of service vulnerability exists in MITSUBISHI PLC, which can be exploited by an attacker to cause a denial of service...
Rockwell Automation/Allen-Bradley MicroLogix Controllers <= 16.00 Nonce Key Pair Reuse
Binary data 720126.prm...
WAGO 750-88x Series and WAGO 750-87x Series Trust Management Issue Vulnerability
The WAGO 750-88x Series and WAGO 750-87x Series are both products of WAGO, Germany.The WAGO 750-88x Series is a 750-88x series programmable logic controller.The WAGO 750-87x Series is a 750-87x series programmable logic controller. A trust management issue vulnerability exists in the WAGO Series...
CVE-2019-10953
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets...
CVE-2019-10953
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets...
CVE-2019-10953
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets...
CVE-2019-10953
ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets...
PT-2019-12100
Name of the Vulnerable Software and Affected Versions Programmable Logic Controllers versions affected versions not specified Description The issue concerns a denial-of-service attack due to a flood of network packets. Researchers have found that some controllers from various manufacturers,...
Multiple SCALANCE X switches products mirror port isolation vulnerability
SCALANCE X switches are used to connect industrial components such as programmable logic controllers PLCs or human machine interfaces HMIs. A mirror port isolation vulnerability exists in several SCALANCE X switches products. The vulnerability is due to the monitoring barriers on the affected...
The vulnerability of Siemens Sinumerik programmable logic controllers lies in errors during exception handling, which allow intruders to read arbitrary data or execute arbitrary code in the kernel mode.
The vulnerability of Siemens Sinumerik programmable logic controllers is related to an error in exception handling. Exploiting this vulnerability could allow attackers to read arbitrary data or execute arbitrary code in the kernel mode...
The vulnerability of Siemens Sinumerik programmable logic controllers lies in the integer overflow that occurs in the VNC server. This allows a perpetrator to execute arbitrary code with privileged privileges.
The vulnerability of Siemens Sinumerik programmable logic controllers is related to a numerical overflow in the VNC server. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with privileged privileges by sending specially crafted packets to port 5900/TCP...
The vulnerability of Siemens Sinumeric programmable logic controllers lies in the insufficient protection of the configuration file, allowing a hacker to execute arbitrary code with elevated privileges.
The vulnerability of Siemens Sinumeric programmable logic controllers is related to insufficient protection of the configuration file. Exploiting this vulnerability allows a perpetrator to execute arbitrary code with elevated privileges after a reboot or manually initiating an action...
The vulnerability of the TeNIX operating system for programmable logic controllers MFC1500 and MFC3000 allows a hacker to gain full access to the system.
The vulnerability of the TeNIX operating system for programmable logic controllers MFC1500 and MFC3000 is related to the use of a default weak password for the root account, information about which is not available in the documentation. Exploiting this vulnerability could allow an attacker,...
The vulnerability of the pnp-receive.sh service in the TeNIX operating system for programmable logic controllers MFC1500 and MFC3000 allows a hacker to write arbitrary data onto the device and exhaust the available disk space.
The vulnerability of the pnp-receive.sh service on the TeNIX programmable logic controllers MFC1500 and MFC3000 operating system is related to the absence of an authentication process. Exploiting this vulnerability allows a malicious actor to exhaust the device’s disk space by sending arbitrary...
The vulnerability of the Taserver web service on the TeNIX operating system for programmable logic controllers MFC1500 and MFC3000 allows a perpetrator to execute arbitrary code.
The vulnerability of the TAserver web service for the TeNIX programmable logic controllers MFC1500 and MFC3000 lies in the lack of name filtering when generating a 404 HTTP error page. As a result, the name of the non-existent web page is passed unchanged to the generated error page. Exploiting...
The vulnerability of microprogrammed software in Schneider Electric Modicon M221 programmable logic controllers is caused by access control errors, which allow attackers to decode passwords.
The vulnerability of the microprogrammed software in Schneider Electric Modicon M221 programmable logic controllers is caused by access control errors. Exploiting this vulnerability could allow an attacker to decode passwords using a rainbow table...
The vulnerability of microprogrammed software in Schneider Electric Modicon M221 programmable logic controllers arises from deficiencies in the authentication process, which allows attackers to bypass the authentication procedures.
The vulnerability of the microprogrammed software in Schneider Electric Modicon M221 programmable logic controllers is due to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypass the authentication process remotely...
Remote Control Vulnerability in HOLLYWOOD LE5109L PLCs
HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A remote control vulnerability exists in the HELISE LE5109L PLC, which can be exploited by an attacker to cause the PLC to be remotely controlled by constructing specific private protocol...
Podcast: The Industrial World is Facing a Security Crisis
As more industrial systems become connected, so follows increased awareness of security issues surrounding industrial control systems, programmable logic controllers and SCADA. These once rare worlds of operational technology OT and IoT have now become part of the mainstream cybersecurity...
Remote Code Upload Vulnerability in DCCE MAC1100 PLCs
The MAC1100 PLC Programmable Logic Controller PLC is a product in the Dalian Computer Control DCCE Programmable Logic Controller PLC series. A remote code upload vulnerability exists in the DCCE MAC1100 PLC. An attacker can exploit this vulnerability to construct malicious control code, remotely...