Siemens CPU 414-2, MPI/DP PLC Detection

Binary data 756593.prm...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC S7-300 CPUs All versions V3.X.16. The affected CPUs improperly validate S7 communication packets which could cause a Denial-of-Service condition of the CPU. The CPU will remain in DEFECT mode until manual restart. Successful exploitation requires an...

The vulnerability of microprogrammed software in Siemens Simatic S7-400 programmable logic controllers is related to errors in checking input data by Ethernet, PROFIBUS, and MPI interfaces. This allows a malicious actor to trigger a service failure.

The vulnerability of microprogrammed programmable logic controllers from Siemens Simatic S7-400 is related to errors in the validation of input data by Ethernet, PROFIBUS, and MPI interfaces. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system by sending a...

SUSE SLES12 Security Update : slurm (SUSE-SU-2017:3311-1)

This update for slurm fixes the following issues: Slurm was updated to 17.02.9 to fix a security bug, bringing new features and bugfixes fate323998 bsc1067580. Security issue fixed : - CVE-2017-15566: Fix security issue in Prolog and Epilog by always prepending SPANK to all user-set environment...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 All versions, SIMATIC S7-400 CPU 412-2 DP V7 All versions, SIMATIC S7-400 CPU 414-2 DP V7 All versions, SIMATIC S7-400 CPU 414-3 DP V7 All versions, SIMATIC S7-400 CPU 414-3 PN/DP V7 All versions V7.0.3, SIMATIC S7-400 CPU 414F...

CVE-2018-16557

A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 All versions, SIMATIC S7-400 CPU 412-2 DP V7 All versions, SIMATIC S7-400 CPU 414-2 DP V7 All versions, SIMATIC S7-400 CPU 414-3 DP V7 All versions, SIMATIC S7-400 CPU 414-3 PN/DP V7 All versions V7.0.3, SIMATIC S7-400 CPU 414F...

CVE-2018-16557

The CVE-2018-16557 entry applies to Siemens SIMATIC S7-400 family CPUs (e.g., 412-1/2 DP V7, 414-2/3 DP V7, 416-2/3 DP V7, 417-4 DP V7, PN/DP variants, H variants) and related SIPLUS/S7-400 CPU families. The vulnerability allows denial of service by sending specially crafted packets to TCP port 1...

CVE-2018-16556

CVE-2018-16556 affects Siemens SIMATIC S7-400 family CPUs (multiple models). Root cause: specially crafted packets sent to port 102/tcp (Ethernet, PROFIBUS, MPI) can cause devices to enter defect mode, requiring a manual reboot. Exploitation requires network access with no user interaction; impac...

PT-2018-2566 · Siemens · Simatic S7-400 Cpu 416-2 Dp V7 +14

Name of the Vulnerable Software and Affected Versions: SIMATIC S7-400 CPU 412-1 DP V7 All versions SIMATIC S7-400 CPU 412-2 DP V7 All versions SIMATIC S7-400 CPU 412-2 PN V7 All versions V7.0.3 SIMATIC S7-400 CPU 414-2 DP V7 All versions SIMATIC S7-400 CPU 414-3 DP V7 All versions SIMATIC S7-400...

bioinf.mpi-inf.mpg.de XSS vulnerability

Open Bug Bounty ID: OBB-633250 Description| Value ---|--- Affected Website:| bioinf.mpi-inf.mpg.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mpi-hd.mpg.de XSS vulnerability

Vulnerable URL: https://www.mpi-hd.mpg.de/mpi/en/contact/phone-directory/?name=x%22%3E%3CsvG%20onLoad=prompt/OPENBUGBOUNTY/%3E〈=en Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

tomancak-srv1.mpi-cbg.de XSS vulnerability

Vulnerable URL: http://tomancak-srv1.mpi-cbg.de/cgi-bin-public/listimages.pl?stage=3=insituovariespublic%22--!%3E%3CSvg/OnLoad=confirm%22OPENBUGBOUNTY%22%3E%[email protected]=2057 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.12.2017 Vulnerability type:| XSS...

Design/Logic Flaw

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c...

CVE-2017-0379

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c...

CVE-2017-0379

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c...

CVE-2017-0379

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c...

CVE-2017-0379

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c...

CVE-2017-0379

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c...

CVE-2017-0379

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c...

CVE-2017-9526

In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key from side-channel observation during the signing process can easily recover the long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this session key in secure memory, to ensure that constant-time point...