Lucene search
+L

1927 matches found

CNVD
CNVD
•added 2017/11/21 12:00 a.m.•17 views

Belden Hirschmann Tofino Xenon Security Appliance Protocol Filter Evasion Vulnerability

The Tofino Xenon security appliance is the ideal solution for segmenting control networks into secure zones. A protocol filter evasion vulnerability exists in the Tofino Xenon security appliance prior to version 03.2.00. The vulnerability arises because the ModBus DPI filter improperly handles th...

9.8CVSS7AI score0.01397EPSS
SaveExploits0References1
Prion
Prion
•added 2017/11/20 3:29 p.m.•32 views

Design/Logic Flaw

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering...

7.5CVSS7.7AI score0.01397EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2017/11/20 3:29 p.m.•31 views

CVE-2017-11401

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering...

9.8CVSS7.8AI score0.01397EPSS
SaveExploits0References2
OSV
OSV
•added 2017/11/20 3:29 p.m.•17 views

CVE-2017-11401

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering...

9.8CVSS5.8AI score0.01397EPSS
SaveExploits0References2
CVE
CVE
•added 2017/11/20 3:00 p.m.•74 views

CVE-2017-11401

The CVE-2017-11401 issue affects Belden Hirschmann Tofino Xenon Security Appliance prior to 03.2.00. The ModBus DPI filter mishandles the mbap.length field in ModBus packets, allowing crafted/malformed packets to bypass function-code filtering and reach protected assets. This is a network‑level b...

9.8CVSS7.7AI score0.01397EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2017/11/20 3:00 p.m.•40 views

CVE-2017-11401

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering...

7.8AI score0.01397EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/20 12:00 a.m.•7 views

CVE-2017-11401: Undefined Security Weakness

An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus packets in the ModBus DPI filter allows an attacker to send malformed/crafted packets to a protected asset, bypassing function code filtering...

9.8CVSS7.7AI score0.01397EPSS
SaveExploits0References1
zdt
zdt
•added 2017/09/13 12:00 a.m.•69 views

ZScada Modbus Buffer 2.0 - Stack-Based Buffer Overflow Exploit

Exploit for windows platform in category remote exploits require 'msf/core' class MetasploitModule 'ZScada Net Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in Z-Scada Net 2.0. The vulnerability is triggered when parsing the response to a Modbus...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2017/09/13 12:00 a.m.•46 views

ZScada Modbus Buffer 2.0 - Stack Buffer Overflow (Metasploit)

ZScada Modbus Buffer 2.0 - Stack Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'ZScada Net Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in Z-Scada Net 2.0. The vulnerability is triggered when parsing the response to a Modbus...

0.8AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2017/09/13 12:00 a.m.•79 views

ZScada Modbus Buffer 2.0 - Stack Buffer Overflow (Metasploit)

require 'msf/core' class MetasploitModule 'ZScada Net Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in Z-Scada Net 2.0. The vulnerability is triggered when parsing the response to a Modbus packet. , 'Author' = 'james fitts' , 'License' = MSFLICENSE,...

5.3AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2017/09/05 12:00 a.m.•34 views

Wireshark 'Modbus' Dissector DoS Vulnerability - Windows

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

7.5CVSS7.5AI score0.01241EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2017/09/05 12:00 a.m.•33 views

Wireshark 'Modbus' Dissector DoS Vulnerability - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

7.5CVSS7.5AI score0.01241EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2017/09/01 3:18 p.m.•35 views

CVE-2017-13764

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation...

7.5CVSS7.4AI score0.01241EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2017/09/01 12:00 a.m.•39 views

Wireshark 2.4.x < 2.4.1 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.4.1 advisory. - In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an infinite loop. This...

7.8CVSS7.3AI score0.02764EPSS
SaveExploits0References13
UbuntuCve
UbuntuCve
•added 2017/08/30 9:29 a.m.•31 views

CVE-2017-13764

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation...

7.5CVSS7.1AI score0.01241EPSS
SaveExploits0References4
NVD
NVD
•added 2017/08/30 9:29 a.m.•24 views

CVE-2017-13764

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation...

7.5CVSS7.3AI score0.01241EPSS
SaveExploits0References5
OSV
OSV
•added 2017/08/30 9:29 a.m.•31 views

CVE-2017-13764

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation...

7.5CVSS6.5AI score
SaveExploits0References5
OSV
OSV
•added 2017/08/30 9:29 a.m.•8 views

DEBIAN-CVE-2017-13764

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation...

7.5CVSS7.8AI score0.01241EPSS
SaveExploits0References1
Prion
Prion
•added 2017/08/30 9:29 a.m.•13 views

Null pointer dereference

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation...

5CVSS7.3AI score0.01241EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2017/08/30 9:29 a.m.•10 views

UBUNTU-CVE-2017-13764

In Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/packet-mbtcp.c by adding length validation...

7.5CVSS7.1AI score0.01241EPSS
SaveExploits0References5
Rows per page
Query Builder