CVE-2021-21964: Improper Access Control

A denial of service vulnerability exists in the Modbus configuration functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. Specially-crafted network packets can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability...

Sealevel Systems, Inc. SeaConnect 370W Modbus/SeaMAX Remote Configuration denial of service vulnerabilities

Summary Two denial of service vulnerabilities exist in the Modbus/SeaMAX Remote Configuration functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. Specially-crafted network packets can lead to denial of service. An attacker can send a malicious packet to trigger these vulnerabilities...

Sealevel Systems, Inc. SeaConnect 370W OTA update task file overwrite vulnerability

Summary A file write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A specially-crafted MQTT payload can lead to arbitrary file overwrite. An attacker can perform a man-in-the-middle attack to trigger this vulnerability. Tested Version...

CVE-2021-22816

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Service of the RTU when receiving a specially crafted request over Modbus, and the RTU is configured as a Modbus server. Affected Products: SCADAPack 312E, 313E, 314E, 330E, 333E, 334...

CVE-2021-22816

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Service of the RTU when receiving a specially crafted request over Modbus, and the RTU is configured as a Modbus server. Affected Products: SCADAPack 312E, 313E, 314E, 330E, 333E, 334...

CVE-2021-22816

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Service of the RTU when receiving a specially crafted request over Modbus, and the RTU is configured as a Modbus server. Affected Products: SCADAPack 312E, 313E, 314E, 330E, 333E, 334...

CVE-2021-22816

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Service of the RTU when receiving a specially crafted request over Modbus, and the RTU is configured as a Modbus server. Affected Products: SCADAPack 312E, 313E, 314E, 330E, 333E, 334...

CVE-2021-22816

The CVE-2021-22816 issue affects Schneider Electric SCADAPack RTUs (models 312E, 313E, 314E, 330E, 333E, 334E, 337E, 350E, 357E) running firmware 8.18.1 and earlier. The root cause is an improper check for unusual or exceptional conditions (CWE-754) that can lead to a Denial of Service when the R...

PT-2022-9286

Name of the Vulnerable Software and Affected Versions SCADAPack 312E, 313E, 314E, 330E, 333E, 334E, 337E, 350E and 357E RTUs with firmware versions prior to V8.18.1 Description A vulnerability exists that could cause a Denial of Service when receiving a specially crafted request over Modbus, and...

SCADAPack 代码问题漏洞

SCADAPack is a Schneider-electric intelligent field controller that combines the monitoring and communication capabilities of a Remote Terminal Unit RTU with the processing and data logging capabilities of a Programmable Logic Controller PLC to provide superior functionality for remote processes...

CVE-2021-22816: Improper Check for Unusual or Exceptional Conditions

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a Denial of Service of the RTU when receiving a specially crafted request over Modbus, and the RTU is configured as a Modbus server. Affected Products: SCADAPack 312E, 313E, 314E, 330E, 333E, 334...

Cisco Firepower Threat Defense Snort Modbus DoS (cisco-sa-snort-dos-9D3hJLuj)

According to its self-reported version, Cisco FTD Software is affected by a denial of service DoS vulnerability in its Snort Modbus component due to an integer overflow. An unauthenticated, remote attacker can exploit this issue to cause the Snort process to stop responding. Please see the includ...

Critical Cisco StarOS Bug Grants Root Access via Debug Mode

Cisco released a security update warning about a handful of vulnerabilities lurking in its networking technology, led by a critical bug in the company’s StarOS debug services. Cisco pushed out a fix for its Cisco StarOS Software on Wednesday. Jan. 19. In its advisory, the company said that the fl...

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. CISA encourages...

Multiple Cisco Products Snort Modbus Denial of Service Vulnerability

A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an integer overflow while processing Modbus traffic. An attacker could exploit th...

NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file

...

PT-2022-2310 · Snort +1 · Snort +1

Name of the Vulnerable Software and Affected Versions: Snort affected versions not specified Description: The issue is caused by an integer overflow while processing Modbus traffic, allowing a remote attacker to cause a denial of service DoS condition on an affected device. An attacker could...

Cisco Products Snort 输入验证错误漏洞

Cisco Products Snort is a Snort engine for Cisco Products from Cisco USA. An input validation error vulnerability exists in Cisco Products Snort Modbus that stems from an integer overflow when processing Modbus traffic. An attacker could cause the Snort process to hang by sending carefully crafte...

PT-2022-5662

Name of the Vulnerable Software and Affected Versions Schneider Electric ConneXium Tofino Firewall versions prior to 03.23 Belden Tofino Xenon Security Appliance affected versions not specified Tofino Argon Security Appliance affected versions not specified EAGLE 20 Tofino affected versions not...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service. The vulnerability exists due to a NULL pointer exception in the Modbus dissector in Wireshark which allows denial of service via packet injection or crafted capture file...