18 matches found
Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors
A maximum-severity security flaw impacting Siemens SIMATIC IoT2050 Advanced devices has come under active exploitation, VulnCheck has revealed. The vulnerability, tracked as CVE-2026-58115 CVSS score: 10.0, is a case of missing authentication for a critical function that could be exploited by an...
VulnCheck KEV: CVE-2026-58115
A vulnerability has been identified in SIMATIC IoT2050 Advanced 6ES7647-0BA00-1YA2 All versions V4.3.4.1 running Industrial OS with Node-RED installed. Affected devices do not enforce authentication on the Node-RED HTTP interface, allowing unauthenticated access to programming nodes that are...
CVE-2026-43836
A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges...
CVE-2026-43836
The provided documents state that a vulnerability exists which could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges . Specific details regarding the affected product, vendor, component, or root cause are not provided in the documentation. No exploit info...
CVE-2026-43836
A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges...
CVE-2026-43836
A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges...
EUVD-2026-104831
A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges...
PT-2026-118271
30 Advantech ADAM-3600 vulnerabilities, including CVE-2026-43836, allow remote code execution and auth bypass. Update EdgeLink to 2.8.5.0. Advantech ADAM3600 ICS OTSecurity CVE202643836 CVE202643844 RemoteCodeExecution CyberSecurity https://t.co/hTwBJVoyA6...
PT-2025-20016
Уязвимость межсетевого экрана UserGate Next-Generation Firewall NGFW и межсетевого экрана уровня веб-приложений UserGate Web Application Firewall WAF связана с непринятием мер по нейтрализации специальных элементов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно,...
Circutor SGE-PLC1000 OS Command Injection Vulnerability
Circutor SGE-PLC1000 is a smart metering system device. The primary function is to manage utility power through CIRWATT meters or other meters with PRIME technology.An operating system command injection vulnerability exists in firmware version 0.9.2b of the Circutor SGE-PLC1000, which can be...
CVE-2021-33841
SGE-PLC1000 device, in its 0.9.2b firmware version, does not handle some requests correctly, allowing a remote attacker to inject code into the operating system with maximum privileges...
CVE-2021-33841 Circutor SGE-PLC1000 OS command Injection
SGE-PLC1000 device, in its 0.9.2b firmware version, does not handle some requests correctly, allowing a remote attacker to inject code into the operating system with maximum privileges...
CVE-2021-33841: Improper Neutralization of Special Elements used in an OS Command
SGE-PLC1000 device, in its 0.9.2b firmware version, does not handle some requests correctly, allowing a remote attacker to inject code into the operating system with maximum privileges...
EVLink Parking Privilege Escalation
The vulnerability of the EVLink Parking software is related to the possibility of code injection. Exploiting this vulnerability can allow a remote attacker to gain access with maximum privileges...
CVE-2018-7801
A Code Injection vulnerability exists in EVLink Parking, v3.2.0-12v1 and earlier, which could enable access with maximum privileges when a remote code execution is performed...
CVE-2018-7801
A Code Injection vulnerability exists in EVLink Parking, v3.2.0-12v1 and earlier, which could enable access with maximum privileges when a remote code execution is performed...
CVE-2018-7801
Schneider Electric EVLink Parking contains a Code Injection vulnerability (CVE-2018-7801) affecting EVLink Parking firmware versions 3.2.0-12_v1 and earlier. The root cause is a code injection flaw that could allow remote code execution with maximum privileges, potentially enabling full control o...
CVE-2018-7801: Improper Control of Generation of Code
A Code Injection vulnerability exists in EVLink Parking, v3.2.0-12v1 and earlier, which could enable access with maximum privileges when a remote code execution is performed...