PT-2021-16751

Name of the Vulnerable Software and Affected Versions AdTran Personal Phone Manager version 10.8.1 Description The issue allows for exfiltration of data over DNS, potentially enabling exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS...

Vulnerabilities fixed in McAfee Endpoint Security

Due to cleartext transfer of sensitive information between McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update and McAfee Global Threat Intelligence GTI servers that use DNS use, a remote attacker can view ENS requests and responses from GTI via DNS. McAfee has released...

The vulnerability of the TCP/IP protocol stack arises from insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of the TCP/IP protocol stack exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted DNS response...

CVE-2020-7308

Cleartext Transmission of Sensitive Information between McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update and McAfee Global Threat Intelligence GTI servers using DNS allows a remote attacker to view the requests from ENS and responses from GTI over DNS. By gaining...

Mcafee McAfee Endpoint Security 安全漏洞

Mcafee McAfee Endpoint Security ENS is a set of U.S. McAfee Mcafee company to provide intelligent collaboration and advanced threat defense framework. The framework supports control of the entire threat defense lifecycle for real-time communications and actionable threat forensics, among other...

PT-2021-12645 · Mcafee · Mcafee Endpoint Security (Ens) For Windows +1

Name of the Vulnerable Software and Affected Versions: McAfee Endpoint Security ENS for Windows versions prior to 10.7.0 February 2021 Update Description: The issue allows a remote attacker to view requests from ENS and responses from McAfee Global Threat Intelligence GTI servers over DNS. This i...

PT-2021-2644 · Unknown · Apogee Pxc Compact +5

Name of the Vulnerable Software and Affected Versions: APOGEE PXC Compact BACnet versions prior to V3.5.5 APOGEE PXC Compact P2 Ethernet versions prior to V2.8.20 APOGEE PXC Modular BACnet versions prior to V3.5.5 APOGEE PXC Modular P2 Ethernet versions prior to V2.8.20 Nucleus NET versions prior...

PT-2021-2645 · Unknown · Apogee Pxc Compact +5

Name of the Vulnerable Software and Affected Versions: APOGEE PXC Compact BACnet versions prior to V3.5.5 APOGEE PXC Compact P2 Ethernet versions prior to V2.8.20 APOGEE PXC Modular BACnet versions prior to V3.5.5 APOGEE PXC Modular P2 Ethernet versions prior to V2.8.20 Nucleus NET versions prior...

PT-2021-2647 · Siemens +1 · Simotics Connect 400 +7

Name of the Vulnerable Software and Affected Versions: APOGEE PXC Compact BACnet versions prior to V3.5.5 APOGEE PXC Compact P2 Ethernet versions prior to V2.8.20 APOGEE PXC Modular BACnet versions prior to V3.5.5 APOGEE PXC Modular P2 Ethernet versions prior to V2.8.20 Nucleus NET affected...

OVN Kubernetes 安全漏洞

Kubernetes K8s is an open source system from the Cloud Native Computing Foundation for automating the deployment, scaling, and management of containerized applications. A security vulnerability exists in OVN Kubernetes version 0.3.0 and prior versions, which stems from an egress firewall's...

PT-2021-2648 · Siemens +1 · Simotics Connect 400 +7

Name of the Vulnerable Software and Affected Versions: APOGEE PXC Compact BACnet versions prior to V3.5.5 APOGEE PXC Compact P2 Ethernet versions prior to V2.8.20 APOGEE PXC Modular BACnet versions prior to V3.5.5 APOGEE PXC Modular P2 Ethernet versions prior to V2.8.20 Nucleus NET affected...

PT-2021-2649 · Siemens +1 · Simotics Connect 400 +7

Name of the Vulnerable Software and Affected Versions: APOGEE PXC Compact BACnet versions prior to V3.5.5 APOGEE PXC Compact P2 Ethernet versions prior to V2.8.20 APOGEE PXC Modular BACnet versions prior to V3.5.5 APOGEE PXC Modular P2 Ethernet versions prior to V2.8.20 Nucleus NET affected...

Nucleus ReadyStart安全特征问题漏洞

The Nucleus NET module includes a range of standards-compliant networking and communications protocols, drivers and utilities to provide full-featured networking support in any embedded device.Nucleus RTOS provides a highly scalable microkernel-based real-time operating system designed for...

多款Siemens产品 缓冲区错误漏洞

The Nucleus NET module contains a range of standards-compliant networking and communications protocols, drivers and utilities to provide full-featured networking support in any embedded device. An out-of-bounds write vulnerability exists in Siemens Nucleus products. The vulnerability is due to th...

多款siemens产品 缓冲区错误漏洞

The Nucleus NET module contains a range of standards-compliant networking and communications protocols, drivers and utilities to provide full-featured networking support in any embedded device. A bounded write vulnerability exists within the Siemens Nucleus Product VC. The vulnerability is due to...

PT-2021-2679 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows DNS service, which can be exploited by a remote attacker to gain unauthorized access to protected information...

PT-2021-2683 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Domain Name System DNS service of Microsoft Windows operating systems. It allows a remote attacker to cause a denial o...

Microsoft Windows DNS 信息泄露漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in DNS in Microsoft Windows and Windows...

多款Siemens产品 安全特征问题漏洞

SIMOTICS CONNECT 400 is a connector and sensor box mounted on a low-voltage motor that provides analysis data for the MindSphere application SIDRIVE IQ Fleet. A security vulnerability exists in the Siemens SIMOTICS CONNECT 400. An attacker could exploit the vulnerability to topologize the DNS cac...

Vulnerabilities fixed in Microsoft Windows

Vulnerabilities have been fixed in Windows. The vulnerabilities allow a malicious person to carry out attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Impersonating another user Access to sensitive...