Lucene search
+L

1738 matches found

CNNVD
CNNVD
added 2022/08/16 12:00 a.m.18 views

Sequi PortBloque S 授权问题漏洞

Sequi PortBloque S is a specialized firewall from Sequi. It protects Modbus devices from serial attacks. An authorization issue vulnerability exists in Sequi PortBloque S. The vulnerability stems from the presence of incorrect authentication issues, which can be exploited by an attacker to bypass...

9.8CVSS8.3AI score0.00917EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/08/16 12:00 a.m.12 views

Sequi PortBloque S 安全漏洞

Sequi PortBloque S is a specialized firewall from Sequi. It protects Modbus devices from serial attacks. A security vulnerability exists in Sequi PortBloque S, which arises from an incorrect authentication issue that can be exploited by an attacker to bypass the authentication process and gain...

9.9CVSS7.9AI score0.008EPSS
SaveExploits0References4
ICS
ICS
added 2022/08/16 12:00 a.m.53 views

Sequi PortBloque S

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Sequi Equipment: Sequi PortBloque S Vulnerabilities : Improper Authentication, Improper Authorization 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in unauthorized...

9.9CVSS9.8AI score0.00917EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2022/08/15 12:00 a.m.17 views

The vulnerability of the Modbus TCP protocol implementation in microprogrammed software for programmable logic controllers from Schneider Electric, such as Modicon M340, M580, MC80, Modicon Momentum MDI, Legacy Modicon Quantum, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Modbus TCP protocol implementation in microprogrammed logic controllers from Schneider Electric, such as Modicon M340, M580, MC80, Modicon Momentum MDI, and Legacy Modicon Quantum, is related to errors in information processing. Exploiting this vulnerability can allow an...

7.8CVSS7.2AI score0.0063EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/08/15 12:00 a.m.33 views

The vulnerability of the Modbus TCP protocol implementation in microprogrammed software for programmable logic controllers from Schneider Electric, such as Modicon M340, M580, MC80, Modicon Momentum MDI, Legacy Modicon Quantum/Premium, allows a intruder to trigger a service failure.

The vulnerability of the Modbus TCP protocol implementation in microprogrammed logic controllers from Schneider Electric, such as Modicon M340, M580, MC80, Modicon Momentum MDI, and Legacy Modicon Quantum/Premium, is related to a potential integer overflow. Exploiting this vulnerability could all...

7.8CVSS7.3AI score0.00727EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
added 2022/08/09 12:00 a.m.16 views

PT-2022-4155 · Schneider Electric · Modicon Quantum/Premium +4

Name of the Vulnerable Software and Affected Versions: Modicon M340 CPU versions V3.40 and prior Modicon M580 CPU versions V3.22 and prior Legacy Modicon Quantum/Premium All Versions Modicon Momentum MDI 171CBU All Versions Modicon MC80 BMKC80 versions V1.7 and prior Description: A CWE-191: Integ...

7.8CVSS7.4AI score0.00727EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2022/08/09 12:00 a.m.13 views

PT-2022-4153 · Schneider Electric · Legacy Modicon Quantum +5

Name of the Vulnerable Software and Affected Versions: Modicon M340 CPU versions prior to V3.30 Modicon M580 CPU versions prior to SV3.20 Modicon MC80 versions prior to V1.6 Modicon M580 CPU Safety version all Modicon Momentum MDI versions prior to V2.3 Legacy Modicon Quantum version all...

7.8CVSS7.6AI score0.0063EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2022/08/02 12:00 a.m.36 views

Siemens EN100 Ethernet Module Improper Restriction of Operations Within the Bounds of a Memory Buffer (CVE-2022-30938)

A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant All versions, EN100 Ethernet module IEC 104 variant All versions, EN100 Ethernet module IEC 61850 variant All versions V4.40, EN100 Ethernet module Modbus TCP variant All versions, EN100 Ethernet module PROFINET IO varia...

7.5CVSS7.2AI score0.01298EPSS
SaveExploits0References3
OSV
OSV
added 2022/07/28 3:15 p.m.10 views

CVE-2021-22648

Ovarro TBox proprietary Modbus file access functions allow attackers to read, alter, or delete the configuration file...

9.8CVSS5.8AI score0.00848EPSS
SaveExploits0References1
NVD
NVD
added 2022/07/28 3:15 p.m.37 views

CVE-2021-22642

An attacker could use specially crafted invalid Modbus frames to crash the Ovarro TBox system...

7.5CVSS0.00809EPSS
SaveExploits0References1
OSV
OSV
added 2022/07/28 3:15 p.m.10 views

CVE-2021-22642

An attacker could use specially crafted invalid Modbus frames to crash the Ovarro TBox system...

7.5CVSS5.8AI score0.00809EPSS
SaveExploits0References1
NVD
NVD
added 2022/07/28 3:15 p.m.26 views

CVE-2021-22648

Ovarro TBox proprietary Modbus file access functions allow attackers to read, alter, or delete the configuration file...

9.8CVSS0.00848EPSS
SaveExploits0References1
Prion
Prion
added 2022/07/28 3:15 p.m.26 views

Code injection

An attacker could use specially crafted invalid Modbus frames to crash the Ovarro TBox system...

5CVSS7.9AI score0.00809EPSS
SaveExploits0References1Affected Software8
Prion
Prion
added 2022/07/28 3:15 p.m.25 views

Design/Logic Flaw

Ovarro TBox proprietary Modbus file access functions allow attackers to read, alter, or delete the configuration file...

7.5CVSS9.4AI score0.00848EPSS
SaveExploits0References1Affected Software8
Vulnrichment
Vulnrichment
added 2022/07/28 2:18 p.m.10 views

CVE-2021-22648 Ovarro TBox Incorrect Permission Assignment for Critical Resource

Ovarro TBox proprietary Modbus file access functions allow attackers to read, alter, or delete the configuration file...

8.8CVSS9.4AI score0.00848EPSS
SaveExploits0References1
CVE
CVE
added 2022/07/28 2:18 p.m.115 views

CVE-2021-22648

CVE-2021-22648 affects Ovarro’s TBox RTU line (LT2, MS-CPU32, MS-CPU32-S2, RM2, TG2) and TWinSoft prior to 12.4, plus firmware before 1.46. The issue is Incorrect Permission Assignment for Critical Resource via TBox’s proprietary Modbus file access, allowing an attacker to read, alter, or delete ...

9.8CVSS9.3AI score0.00848EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/07/28 2:18 p.m.39 views

CVE-2021-22648 Ovarro TBox Incorrect Permission Assignment for Critical Resource

Ovarro TBox proprietary Modbus file access functions allow attackers to read, alter, or delete the configuration file...

8.8CVSS9.6AI score0.00848EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/07/28 2:17 p.m.8 views

CVE-2021-22642 Ovarro TBox Uncontrolled Resource Consumption

An attacker could use specially crafted invalid Modbus frames to crash the Ovarro TBox system...

7.5CVSS7.5AI score0.00809EPSS
SaveExploits0References1
CVE
CVE
added 2022/07/28 2:17 p.m.91 views

CVE-2021-22642

CVE-2021-22642 corresponds to an Ovarro TBox vulnerability in which a remote attacker can crash the device by sending specially crafted invalid Modbus frames. The issue affects multiple TBox RTU products (e.g., TBox LT2, TBox MS-CPU32, MS-CPU32-S2, RM2, TG2) and is described under ICSA-21-054-04 ...

7.5CVSS7.6AI score0.00809EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/07/28 2:17 p.m.42 views

CVE-2021-22642 Ovarro TBox Uncontrolled Resource Consumption

An attacker could use specially crafted invalid Modbus frames to crash the Ovarro TBox system...

7.5CVSS7.6AI score0.00809EPSS
SaveExploits0References1
Rows per page
Query Builder