Lucene search
+L

2010 matches found

The Hacker News
The Hacker News
•added 2024/07/23 10:54 a.m.•48 views

New ICS Malware 'FrostyGoop' Targeting Critical Infrastructure

Cybersecurity researchers have discovered what they say is the ninth Industrial Control Systems ICS-focused malware that has been used in a disruptive cyber attack targeting an energy company in the Ukrainian city of Lviv earlier this January. Industrial cybersecurity firm Dragos has dubbed the...

7.6AI score
SaveExploits0
OSV
OSV
•added 2024/07/11 3:15 p.m.•9 views

DEBIAN-CVE-2024-38534

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Crafted modbus traffic can lead to unlimited resource accumulation within a flow. Upgrade to 7.0.6. Set a limited stream.reassembly.depth to reduce the issue...

7.5CVSS8.4AI score0.00869EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/11 3:15 p.m.•35 views

CVE-2024-38534

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Crafted modbus traffic can lead to unlimited resource accumulation within a flow. Upgrade to 7.0.6. Set a limited stream.reassembly.depth to reduce the issue...

7.5CVSS0.00869EPSS
SaveExploits0References4
OSV
OSV
•added 2024/07/11 3:15 p.m.•40 views

UBUNTU-CVE-2024-38534

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Crafted modbus traffic can lead to unlimited resource accumulation within a flow. Upgrade to 7.0.6. Set a limited stream.reassembly.depth to reduce the issue...

7.5CVSS5.8AI score0.00869EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2024/07/11 2:47 p.m.•49 views

CVE-2024-38534 Suricata modbus: txs without responses are never freed

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Crafted modbus traffic can lead to unlimited resource accumulation within a flow. Upgrade to 7.0.6. Set a limited stream.reassembly.depth to reduce the issue...

7.5CVSS0.00869EPSS
SaveExploits0References4
CVE
CVE
•added 2024/07/11 2:47 p.m.•92 views

CVE-2024-38534

CVE-2024-38534 affects Suricata (network IDS/IPS/NSM). Crafted Modbus traffic can cause unlimited resource accumulation within a single flow, impacting availability. The documented remediation is to upgrade Suricata to version 7.0.6 or later and to set a limited stream.reassembly.depth to reduce ...

7.5CVSS7.3AI score0.00869EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/07/11 2:47 p.m.•23 views

CVE-2024-38534 Suricata modbus: txs without responses are never freed

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Crafted modbus traffic can lead to unlimited resource accumulation within a flow. Upgrade to 7.0.6. Set a limited stream.reassembly.depth to reduce the issue...

7.5CVSS6.8AI score0.00869EPSS
SaveExploits0References4
OSV
OSV
•added 2024/07/11 2:47 p.m.•31 views

CVE-2024-38534 Suricata modbus: txs without responses are never freed

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Crafted modbus traffic can lead to unlimited resource accumulation within a flow. Upgrade to 7.0.6. Set a limited stream.reassembly.depth to reduce the issue...

7.5CVSS7.2AI score
SaveExploits0References6
Debian CVE
Debian CVE
•added 2024/07/11 2:47 p.m.•74 views

CVE-2024-38534

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Crafted modbus traffic can lead to unlimited resource accumulation within a flow. Upgrade to 7.0.6. Set a limited stream.reassembly.depth to reduce the issue...

7.5CVSS7.3AI score0.00869EPSS
SaveExploits0
Mend
Mend
•added 2024/07/11 2:47 p.m.•2 views

CVE-2024-38534

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Crafted modbus traffic can lead to unlimited resource accumulation within a flow. Upgrade to 7.0.6. Set a limited stream.reassembly.depth to reduce the issue...

8.7CVSS0.00869EPSS
SaveExploits0References7
AlpineLinux
AlpineLinux
•added 2024/07/11 2:47 p.m.•77 views

CVE-2024-38534

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Crafted modbus traffic can lead to unlimited resource accumulation within a flow. Upgrade to 7.0.6. Set a limited stream.reassembly.depth to reduce the issue...

7.5CVSS7.5AI score0.00869EPSS
SaveExploits0
CNNVD
CNNVD
•added 2024/07/11 12:00 a.m.•16 views

Suricata security breach

Suricata is a suite of network intrusion detection systems IDS, intrusion prevention systems IPS, and network security monitoring engines developed by the Open Information Security Foundation OISF and its supporting vendors, which supports multi-threading, built-in IPv6, and the ability to load...

7.5CVSS6.6AI score0.00869EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/07/11 12:00 a.m.•11 views

PT-2024-28060

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.6 Description Suricata is a network Intrusion Detection System, Intrusion Prevention System, and Network Security Monitoring engine. Crafted modbus traffic can lead to unlimited resource accumulation within a flo...

7.5CVSS6.6AI score0.00874EPSS
SaveExploits1References52
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/11 12:00 a.m.•3 views

CVE-2024-38534: Allocation of Resources Without Limits or Throttling

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Crafted modbus traffic can lead to unlimited resource accumulation within a flow. Upgrade to 7.0.6. Set a limited stream.reassembly.depth to reduce the issue...

7.5CVSS8.1AI score0.00869EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/09 12:15 p.m.•25 views

CVE-2024-39675

A vulnerability has been identified in RUGGEDCOM RMC30 All versions V4.3.10, RUGGEDCOM RMC30NC All versions V4.3.10, RUGGEDCOM RP110 All versions V4.3.10, RUGGEDCOM RP110NC All versions V4.3.10, RUGGEDCOM RS400 All versions V4.3.10, RUGGEDCOM RS400NC All versions V4.3.10, RUGGEDCOM RS401 All...

8.8CVSS0.00282EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/09 12:05 p.m.•29 views

CVE-2024-39675

A vulnerability has been identified in RUGGEDCOM RMC30 All versions V4.3.10, RUGGEDCOM RMC30NC All versions V4.3.10, RUGGEDCOM RP110 All versions V4.3.10, RUGGEDCOM RP110NC All versions V4.3.10, RUGGEDCOM RS400 All versions V4.3.10, RUGGEDCOM RS400NC All versions V4.3.10, RUGGEDCOM RS401 All...

8.8CVSS0.00282EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/09 12:05 p.m.•63 views

CVE-2024-39675

CVE-2024-39675 affects Siemens RuggedCOM devices (RMC30/RP110/RS400/RS401/RS416/RS910/RS920 and variants) with a Modbus-related information exposure when Modbus is enabled in non-managed VLANs. The Red Hat/NVD/Nessus/NCSC/CISA advisories confirm: only serial devices are impacted; some fixes are p...

8.8CVSS6.7AI score0.00282EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/09 12:05 p.m.•12 views

CVE-2024-39675

A vulnerability has been identified in RUGGEDCOM RMC30 All versions V4.3.10, RUGGEDCOM RMC30NC All versions V4.3.10, RUGGEDCOM RP110 All versions V4.3.10, RUGGEDCOM RP110NC All versions V4.3.10, RUGGEDCOM RS400 All versions V4.3.10, RUGGEDCOM RS400NC All versions V4.3.10, RUGGEDCOM RS401 All...

8.8CVSS6.7AI score0.00282EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/09 12:00 a.m.•14 views

PT-2024-5179 · Siemens · Ruggedcom Rs920L +10

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RMC30 versions prior to V4.3.10 RUGGEDCOM RMC30NC versions prior to V4.3.10 RUGGEDCOM RP110 versions prior to V4.3.10 RUGGEDCOM RP110NC versions prior to V4.3.10 RUGGEDCOM RS400 versions prior to V4.3.10 RUGGEDCOM RS400NC versions...

8.8CVSS6.9AI score0.00282EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/09 12:00 a.m.•2 views

CVE-2024-39675: Exposure of Sensitive System Information to an Unauthorized Control Sphere

A vulnerability has been identified in RUGGEDCOM RMC30 All versions V4.3.10, RUGGEDCOM RMC30NC All versions V4.3.10, RUGGEDCOM RP110 All versions V4.3.10, RUGGEDCOM RP110NC All versions V4.3.10, RUGGEDCOM RS400 All versions V4.3.10, RUGGEDCOM RS400NC All versions V4.3.10, RUGGEDCOM RS401 All...

8.8CVSS7.4AI score0.00282EPSS
SaveExploits0References1
Rows per page
Query Builder