Lucene search
K

176 matches found

BDU FSTEC
BDU FSTEC
added 2022/06/27 12:0 a.m.3 views

The vulnerability of microprogrammed software for programmable logic controllers of the SYSMAC CS/CJ/CP series lies in insufficient data authenticity checking, allowing attackers to execute arbitrary commands.

The vulnerability of microprogrammed software in programmable logic controllers of the SYSMAC CS/CJ/CP series is related to insufficient verification of data authenticity. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...

10CVSS5.8AI score
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/24 12:0 a.m.2 views

The vulnerability of microprogrammed software in programmable logic controllers such as AXC 1050, AXC 1050 XC, AXC 3050, FC 350 PCI ETH, ILC1x0, ILC1x1, ILC 1x1 GSM/GPRS, ILC 3xx, PC WORX RT BASIC, PC WORX SRT, RFC 430 ETH-IB, RFC 450 ETH-IB, RFC 460R PN 3TX, RFC 460R PN 3TX-S, RFC 470 PN 3TX, RFC 470S PN 3TX, RFC 480S PN 4TX arises from insufficient data authenticity checks. This allows attackers to gain full control over the device.

The vulnerabilities of microprogrammed software in programmable logic controllers such as AXC 1050, AXC 1050 XC, AXC 3050, FC 350 PCI ETH, ILC1x0, ILC1x1, ILC 1x1 GSM/GPRS, ILC 3xx, PC WORX RT BASIC, PC WORX SRT, RFC 430 ETH-IB, RFC 450 ETH-IB, RFC 460R PN 3TX, RFC 460R PN 3TX-S, RFC 470 PN 3TX,...

10CVSS7.8AI score0.01455EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.6 views

The vulnerability of microprogrammed solid-state storage devices from Intel(R) Optane, Intel(R) Optane(TM) DC, and Intel(R) DC, related to the simultaneous execution using a shared resource with incorrect synchronization, allows attackers to cause service failures.

The vulnerability of microprogrammed solid-state storage devices from IntelR Optane, IntelR OptaneTM DC, and IntelR DC involves the simultaneous execution of operations using shared resources with improper synchronization. Exploiting this vulnerability can allow attackers to cause service failure...

4.7CVSS5.7AI score0.00156EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.6 views

The vulnerability of microprogrammed storage software for Intel SSDs lies in the lack of protection for mission-critical data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of microprogrammed solid-state storage devices like Intel SSDs lies in the lack of protection for operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

4.9CVSS5.5AI score0.0027EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.5 views

The vulnerability of microprogrammed software in programmable logic controllers such as ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, CompactLogix 5480, and Compact GuardLogix 5380 lies in improper code generation. This allows attackers to implant code into the controller that the user will be unable to detect.

The vulnerability of microprogrammed software in programmable logic controllers such as ControlLogix 5580, GuardLogix 5580, CompactLogix 5380, CompactLogix 5480, and Compact GuardLogix 5380 lies in improper code generation. Exploiting this vulnerability allows an intruder to implant code into the...

7.7CVSS7.5AI score0.03398EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:0 a.m.6 views

The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus relates to errors in processing UDP packet headers. This vulnerability allows an attacker to gain access to protected information or cause a service failure.

The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus is related to errors in processing the UDP packet header. Exploiting this vulnerability can allow an attacker to gain access to protected...

9.4CVSS7.7AI score0.01578EPSS
Exploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:0 a.m.4 views

The vulnerability in the web interface for controlling microprogrammed software in Cisco IP Phones 6800, Cisco IP Phone 7800, and Cisco IP Phone 8800 allows a attacker to perform a CSRF attack.

The vulnerability of the web interface for controlling microprogrammed software in Cisco IP Phones 6800, 7800, and 8800 is related to insufficient verification of the HTTP request source. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack using a specially created web...

7.1CVSS7.5AI score0.00383EPSS
Exploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:0 a.m.8 views

The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus relates to errors in processing ICMP packet headers. This vulnerability allows attackers to gain access to protected information or cause service interruptions.

The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus is related to errors in processing ICMP packet headers. Exploiting this vulnerability can allow a remote attacker to gain access to protected...

9.4CVSS7.8AI score0.01902EPSS
Exploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/03/25 12:0 a.m.5 views

The vulnerability of microprogrammed software in time-synchronization servers for precise timing, such as Reason RT430/RT434 GNSS Grandmaster Clock, is related to the possibility of introducing code that allows a violator to execute arbitrary code.

The vulnerability of the microprogramming software used in time-synchronized server synchronization systems like Reason RT430/RT434 GNSS Grandmaster Clock is related to the possibility of code injection. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8AI score0.02982EPSS
Exploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/03/11 12:0 a.m.4 views

The vulnerability of microprogrammed software in APC Smart-UPS power supply models of the SMT, SMC, SMTL, SCL, SMX series is related to errors during the authentication process. This allows a perpetrator to execute arbitrary code.

The vulnerability of microprogrammed software in APC Smart-UPS power supplies of the SMT, SMC, SMTL, SCL, and SMX series is related to errors during the authentication process. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

9CVSS8.3AI score0.1226EPSS
Exploits0References3Affected Software8
BDU FSTEC
BDU FSTEC
added 2022/03/11 12:0 a.m.7 views

The vulnerability of Microprogrammed Software Sources for APC Smart-UPS battery backup systems of the SMT, SMC, SMTL, SCL, SMX series is related to errors in processing TLS packets. This vulnerability allows a hacker to execute arbitrary code.

The vulnerability of Microprogrammed Software Sources for APC Smart-UPS battery backup systems of the SMT, SMC, SMTL, SCL, and SMX series is related to errors in processing TLS packets. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8.4AI score0.11668EPSS
Exploits0References3Affected Software8
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:0 a.m.7 views

The vulnerability of microprogrammed Wi-Fi router software such as CBR750, D6220, D6400, D8500, LAX20, MK62, MR60, MS60, R6300v2, R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R7850, R7900, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX40v2, RAX43, RAX45, RAX50, RAX75, RAX80, RBK752, RBK852, RBR750, RBR850, RBS750, RBS850, RS400, XR1000 lies in the ability to record data beyond the buffer, allowing an intruder to cause a service failure.

The vulnerability of Microprogrammed Wi-Fi router software, including CBR750, D6220, D6400, D8500, LAX20, MK62, MR60, MS60, R6300v2, R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R7850, R7900, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX40v2, RAX43, RAX45, RAX50, RAX75,...

5.7CVSS5.5AI score0.00369EPSS
Exploits0References3Affected Software39
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:0 a.m.4 views

The vulnerability of microprogrammed software in NETGEAR network devices such as EAX80, EX7000, R6120, R6220, R6230, R6260, R6850, R6350, R6330, R6800, R6900v2, R6700v2, R7000, R6900P, R7000P, R7200, R7350, R7400, R7450, AC2100, AC2400, AC2600, R7900, R7960P, R8000, R7900P, R8000P, RAX15, RAX20, RAX200, RAX45, RAX50, RAX75, RAX80 is related to insufficient protection of service data. This vulnerability allows attackers to gain unauthorized access to protected information.

The vulnerability of microprogrammed network devices from NETGEAR models EAX80, EX7000, R6120, R6220, R6230, R6260, R6850, R6350, R6330, R6800, R6900v2, R6700v2, R7000, R6900P, R7000P, R7200, R7350, R7400, R7450, AC2100, AC2400, AC2600, R7900, R7960P, R8000, R7900P, R8000P, RAX15, RAX20, RAX200,...

6.5CVSS7.2AI score0.01303EPSS
Exploits0References3Affected Software34
BDU FSTEC
BDU FSTEC
added 2021/12/22 12:0 a.m.6 views

The vulnerability of the Ethernet software solutions WISE-4060, Adam-6050 D, and Adam.NET Utility lies in the lack of authentication attempt limits, allowing attackers to gain full access to the device.

The vulnerability of the Microprogrammed Ethernet module WISE-4060, Adam-6050 D, and Adam.NET Utility is related to the absence of authentication attempt limits. Exploiting this vulnerability can allow a malicious actor to gain full access to the device remotely...

10CVSS5.5AI score
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/02 12:0 a.m.4 views

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium lies in insufficient testing for unusual or exceptional states. This allows a intruder to trigger malfunctions during maintenance.

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium lies in insufficient testing for unusual or exceptional states. Exploiting this vulnerability can allow an attacker operati...

7.8CVSS7.2AI score0.01382EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/01 12:0 a.m.2 views

The vulnerability of microprogrammed software in industrial modems of the OnCell G3470A-LTE Series and WDR-3124A Series, as well as in microprogrammed software for Wi-Fi routers of the TAP-323 Series, WAC-1001 Series, and WAC-2004 Series, arises from the lack of measures taken to neutralize special elements used in operating systems. This allows attackers to enhance their privileges.

The vulnerabilities of microprogrammed software in industrial modems of the OnCell G3470A-LTE Series, WDR-3124A Series, microprogrammed software in Wi-Fi routers of the TAP-323 Series, WAC-1001 Series, and WAC-2004 Series are related to the lack of measures taken to neutralize special elements us...

6.4CVSS7.6AI score0.04614EPSS
Exploits3References4Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/08/30 12:0 a.m.4 views

The vulnerability of microprogrammed programmable logic controllers like Modicon and PacDrive lies in the lack of authentication for a critical function. This allows attackers to alter the device’s IP configuration.

The vulnerability of the microprogrammed logic controllers Modicon and PacDrive lies in the absence of authentication for the critical function. Exploiting this vulnerability allows an attacker to remotely alter the device’s IP configuration...

7.1CVSS7.5AI score0.0124EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/08/30 12:0 a.m.4 views

The vulnerability of the microprogrammed power measurement devices and energy meters from PowerLogic, models ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600, arises from the execution of operations beyond the buffer boundaries in memory. This allows an attacker to trigger a system reboot.

The vulnerability of the microprogrammed power measurement devices and energy meters from PowerLogic, models ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600, lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an...

7.5CVSS7.5AI score0.01185EPSS
Exploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/08/26 12:0 a.m.5 views

The vulnerability of microprogrammed software for Modicon M218, M218, M241, M251, and M258 logic controllers lies in insufficient data authenticity checking, allowing attackers to execute arbitrary codes.

The vulnerability of microprogrammed software in Modicon M218, M218, M241, M251, and M258 logic controllers is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrary codes...

5.4CVSS8.1AI score0.00675EPSS
Exploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/08/10 12:0 a.m.5 views

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 220 Series Smart Switches allows attackers to execute cross-site scripting attacks.

The vulnerability of the web interface for managing microprogramming software on Cisco Small Business 220 Series Smart Switches is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

6.4CVSS6.5AI score0.0932EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder