Lucene search
+L

34066 matches found

Prion
Prion
•added 2023/04/11 10:15 a.m.•27 views

Design/Logic Flaw

A vulnerability has been identified in SCALANCE X200-4P IRT All versions V5.5.2, SCALANCE X201-3P IRT All versions V5.5.2, SCALANCE X201-3P IRT PRO All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2P IRT All versions V5.5.2, SCALAN...

4CVSS7.1AI score0.00256EPSS
SaveExploits0References1Affected Software13
Cvelist
Cvelist
•added 2023/04/11 9:03 a.m.•48 views

CVE-2023-29054

A vulnerability has been identified in SCALANCE X200-4P IRT All versions V5.5.2, SCALANCE X201-3P IRT All versions V5.5.2, SCALANCE X201-3P IRT PRO All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2P IRT All versions V5.5.2, SCALAN...

6.7CVSS7.2AI score0.00256EPSS
SaveExploits0References1
CVE
CVE
•added 2023/04/11 9:03 a.m.•90 views

CVE-2023-29054

CVE-2023-29054 affects Siemens SCALANCE devices (X200-4P IRT, X201-3P IRT/IRT PRO, X202-2IRT/IRT PRO/2P, X204IRT, XF201-3P/XF202-2P/XF204IRT, SIPLUS NET X202-2P IRT) with all versions

7.4CVSS7AI score0.00256EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/04/11 9:03 a.m.•11 views

CVE-2023-29054

A vulnerability has been identified in SCALANCE X200-4P IRT All versions V5.5.2, SCALANCE X201-3P IRT All versions V5.5.2, SCALANCE X201-3P IRT PRO All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2P IRT All versions V5.5.2, SCALAN...

6.7CVSS6.8AI score0.00256EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/04/11 9:03 a.m.•16 views

CVE-2023-23588

A vulnerability has been identified in SIMATIC IPC1047 All versions, SIMATIC IPC1047E All versions with maxView Storage Manager 4.09.00.25611 on Windows, SIMATIC IPC647D All versions, SIMATIC IPC647E All versions with maxView Storage Manager 4.09.00.25611 on Windows, SIMATIC IPC847D All versions,...

6.2CVSS6.4AI score0.00092EPSS
SaveExploits0References1
CVE
CVE
•added 2023/04/11 9:03 a.m.•78 views

CVE-2023-23588

CVE-2023-23588 affects Siemens SIMATIC IPC1047/IPC1047E/IPC647D/IPC647E/IPC847D/IPC847E. Root cause: Adaptec maxView uses a non-unique TLS certificate across installations, enabling local attackers to decrypt traffic and perform man-in-the-middle changes between the browser and the local applicat...

6.3CVSS6AI score0.00092EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/04/11 9:03 a.m.•45 views

CVE-2023-23588

A vulnerability has been identified in SIMATIC IPC1047 All versions, SIMATIC IPC1047E All versions with maxView Storage Manager 4.09.00.25611 on Windows, SIMATIC IPC647D All versions, SIMATIC IPC647E All versions with maxView Storage Manager 4.09.00.25611 on Windows, SIMATIC IPC847D All versions,...

6.2CVSS6.2AI score0.00092EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/04/11 12:00 a.m.•9 views

PT-2023-2394 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an insecure implementation of the Kerberos protocol in Windows, specifically involving the use of the RC4 encryption algorithm with the MD4 hash function. This can b...

8.1CVSS9.2AI score0.0292EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2023/04/11 12:00 a.m.•18 views

PT-2023-7378 · Fortinet · Fortiguard +2

Name of the Vulnerable Software and Affected Versions: FortiAnalyzer and FortiManager versions 6.4.8 through 6.4.10 FortiAnalyzer and FortiManager versions 7.0.0 through 7.0.5 FortiAnalyzer and FortiManager versions 7.2.0 through 7.2.1 Description: The issue is related to an improper certificate...

8.1CVSS8AI score0.00275EPSS
SaveExploits0References4
Fortinet
Fortinet
•added 2023/04/11 12:00 a.m.•54 views

Lack of client-side certificate validation when establishing secure connections with FortiGuard to download outbreakalert

...

8.1CVSS7.4AI score0.00275EPSS
SaveExploits0
CNNVD
CNNVD
•added 2023/04/11 12:00 a.m.•18 views

Fortinet FortiManager 信任管理问题漏洞

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet appliances and the ability to group appliances into different administrative domains ADOMs to further simplify multi-appliance security...

8.1CVSS7.9AI score0.00275EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/04/11 12:00 a.m.•19 views

PT-2023-9653 · Microsemi +1 · Adaptec Maxview +4

Name of the Vulnerable Software and Affected Versions: SIMATIC IPC1047 versions prior to 4.09.00.25611 SIMATIC IPC1047E versions prior to 4.09.00.25611 SIMATIC IPC647D versions prior to 4.09.00.25611 SIMATIC IPC647E versions prior to 4.09.00.25611 SIMATIC IPC847D versions prior to 4.09.00.25611...

6.3CVSS5.9AI score0.00092EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/04/11 12:00 a.m.•2 views

PT-2023-7596

Name of the Vulnerable Software and Affected Versions SCALANCE X200-4P IRT versions prior to V5.5.2 SCALANCE X201-3P IRT versions prior to V5.5.2 SCALANCE X201-3P IRT PRO versions prior to V5.5.2 SCALANCE X202-2IRT versions prior to V5.5.2 SCALANCE X202-2P IRT versions prior to V5.5.2 SCALANCE...

9.7CVSS0.00256EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/11 12:00 a.m.•6 views

CVE-2023-29054: Inadequate Encryption Strength

A vulnerability has been identified in SCALANCE X200-4P IRT All versions V5.5.2, SCALANCE X201-3P IRT All versions V5.5.2, SCALANCE X201-3P IRT PRO All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2P IRT All versions V5.5.2, SCALAN...

7.4CVSS5.7AI score0.00256EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/11 12:00 a.m.•4 views

CVE-2023-22642: Improper Certificate Validation

An improper certificate validation vulnerability CWE-295 in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and the...

8.1CVSS5.9AI score0.00275EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/11 12:00 a.m.•4 views

CVE-2023-23588: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been identified in SIMATIC IPC1047 All versions, SIMATIC IPC1047E All versions with maxView Storage Manager 4.09.00.25611 on Windows, SIMATIC IPC647D All versions, SIMATIC IPC647E All versions with maxView Storage Manager 4.09.00.25611 on Windows, SIMATIC IPC847D All versions,...

6.3CVSS5.6AI score0.00092EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/04/11 12:00 a.m.•22 views

Siemens SIMATIC IPC DiagMonitor 信任管理问题漏洞

Siemens SIMATIC IPC DiagMonitor is a set of system monitoring and troubleshooting software from Siemens Germany. A trust management issue vulnerability exists in Siemens SIMATIC IPC DiagMonitor, which can be exploited by an attacker to perform a man-in-the-middle attack to modify data in transit...

6.3CVSS6.7AI score0.00092EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/04/11 12:00 a.m.•35 views

Siemens Scalance W-7xx Series Hard-coded SSL Certificate (CVE-2013-4651)

Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the- middle attacks against SSL sessions by leveraging the certificate's trust relationship. Th...

6.6CVSS5.9AI score0.00951EPSS
SaveExploits1References2
OSV
OSV
•added 2023/04/10 10:15 p.m.•16 views

CVE-2023-26467

A man in the middle can redirect traffic to a malicious server in a compromised configuration...

5.4CVSS7.3AI score0.00592EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/04/10 12:00 a.m.•55 views

Pegasystem PEGA Platform 数据伪造问题漏洞

Pegasystem PEGA Platform is a suite of application development platforms from the US-based Pegasystem. The platform is used to develop applications such as BPM Business Process Management, case management, real-time decision making, and CRM Customer Relationship Management. A security vulnerabili...

8.1CVSS7.7AI score0.00592EPSS
SaveExploits0References2
Rows per page
Query Builder