The vulnerability of Moxa EDS-P510 microcontroller software-related microprogramming systems, related to access control errors, allows attackers to escalate their privileges.

The vulnerability of Moxa EDS-P510 microcontroller software-related systems is related to errors in access control for the Modbus/TCP interface. Exploiting this vulnerability allows an attacker to enhance their privileges and alter the device’s functions in SCADA and DCS environments...

The vulnerability of Moxa EDS-P510 microcontroller software, related to the lack of protection for service data, allows a intruder to disclose the protected information.

The vulnerability of Moxa EDS-P510 microcontroller-based software lies in the lack of protection for service data. Exploiting this vulnerability allows an attacker to disclose protected information through Modbus MEI read requests...

PT-2024-41476 · Moxa · Moxa Eds-P510

Уязвимость микропрограммного обеспечения коммутаторов Moxa EDS-P510 связана с ошибками разграничения доступа к катушке Modbus/TCP. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии и изменить функции устройства в средах SCADA и DCS...

PT-2024-41475 · Moxa · Moxa Eds-P510

Уязвимость микропрограммного обеспечения коммутаторов Moxa EDS-P510 связана с отсутствием защиты служебных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, раскрыть защищаемую информацию с помощью запросов на чтение Modbus MEI...

PT-2024-10219 · Schneider Electric · Powerlogic Hdpm6000

Name of the Vulnerable Software and Affected Versions: Schneider Electric PowerLogic HDPM6000 versions up to 0.62.7 Description: The issue is related to an Improper Restriction of Operations within the Bounds of a Memory Buffer, which could allow an unauthorized attacker to modify configuration...

Siemens SENTRON PAC Meter Authentication Error Vulnerability

The SENTRON PAC Meter is a power measurement device for precise energy management and transparent information acquisition. An authentication error vulnerability exists in the Siemens SENTRON PAC Meter, which can be exploited by an attacker to bypass authentication via brute force attack or by...

CVE-2024-41798

A vulnerability has been identified in SENTRON 7KM PAC3200 All versions. Affected devices only provide a 4-digit PIN to protect from administrative access via Modbus TCP interface. Attackers with access to the Modbus TCP interface could easily bypass this protection by brute-force attacks or by...

CVE-2024-41798

A vulnerability has been identified in SENTRON 7KM PAC3200 All versions. Affected devices only provide a 4-digit PIN to protect from administrative access via Modbus TCP interface. Attackers with access to the Modbus TCP interface could easily bypass this protection by brute-force attacks or by...

CVE-2024-41798

A vulnerability has been identified in SENTRON 7KM PAC3200 All versions. Affected devices only provide a 4-digit PIN to protect from administrative access via Modbus TCP interface. Attackers with access to the Modbus TCP interface could easily bypass this protection by brute-force attacks or by...

CVE-2024-41798

CVE-2024-41798 affects Siemens SENTRON 7KM PAC3200 (all versions). The vulnerability is improper authentication: the Modbus TCP interface is protected only by a 4-digit PIN, which can be bypassed via brute-force or by sniffing cleartext Modbus communications. Impact described as potential exposur...

PT-2024-7770 · Siemens · Siemens Sentron 7Km Pac3200

Name of the Vulnerable Software and Affected Versions: Siemens SENTRON 7KM PAC3200 All versions Description: A vulnerability has been identified in the Modbus TCP interface of the Siemens SENTRON 7KM PAC3200, where affected devices only provide a 4-digit PIN to protect from administrative access...

Siemens SENTRON 7KM PAC3200 授权问题漏洞

The SENTRON PAC Meter is a power measurement device for precise energy management and transparent information acquisition. An authentication error vulnerability exists in the Siemens SENTRON PAC Meter, which can be exploited by an attacker to bypass authentication via brute force attack or by...

Siemens SENTRON PAC3200 Devices

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Schneider Modicon Remote START/STOP Command

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Schneider Modicon Remote START/STOP Command', 'Description' = %q The Schneider Modicon with Unity series of PLCs use Modbus function code 90 0x5a...

Schneider Modicon Ladder Logic Upload/Download

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Schneider Modicon Ladder Logic Upload/Download', 'Description' = %q The Schneider Modicon with Unity series of PLCs use Modbus function code 90...

CVE-2024-7567

A denial-of-service vulnerability exists via the CIP/Modbus port in the Rockwell Automation Micro850/870 2080 -L50E/2080 -L70E. If exploited, the CIP/Modbus communication may be disrupted for short duration...

CVE-2024-7567 Rockwell Automation Micro850/870 Vulnerable to denial-of-service Vulnerability via CIP/Modbus Port

A denial-of-service vulnerability exists via the CIP/Modbus port in the Rockwell Automation Micro850/870 2080 -L50E/2080 -L70E. If exploited, the CIP/Modbus communication may be disrupted for short duration...

CVE-2024-7567 Rockwell Automation Micro850/870 Vulnerable to denial-of-service Vulnerability via CIP/Modbus Port

A denial-of-service vulnerability exists via the CIP/Modbus port in the Rockwell Automation Micro850/870 2080 -L50E/2080 -L70E. If exploited, the CIP/Modbus communication may be disrupted for short duration...

Rockwell Automation Micro850/870

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : Micro850/870 Vulnerability : Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability may cause CIP/Modbus...

PT-2024-8939 · Rockwell Automation · Micro850/870

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Micro850/870 versions 2080 -L50E/2080 -L70E Description: A denial-of-service issue exists due to uncontrolled resource consumption via the CIP/Modbus port. If exploited, this could disrupt CIP/Modbus communication for a...