Tridium Niagara Improper Authentication

A specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 JACE 3e, JACE 6e, JACE 7, JACE-8000, Niagara 4.4u3 JACE 3e, JACE 6e, JACE 7, JACE-8000, and Niagara 4.7u1 JACE-8000, Edge 10. File data ot500383.nasl...

Tridium Niagara Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by leveraging valid platform administrator credentials. File data ot500380.nasl...

Abb Relion Improper Input Validation

An attacker may use a specially crafted message to force Relion 650 series versions 1.3.0.5 and prior or Relion 670 series versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior to reboot, which could cause a denial of service. File data ot500358.nasl...

Beckhoff Twincat Improper Input Validation

Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution as SYSTEM via the Beckhoff ADS protocol. File data ot500357.nasl...

Beckhoff Twincat Improper Resource Shutdown or Release

When a Beckhoff TwinCAT Runtime receives a malformed UDP packet, the ADS Discovery Service shuts down. Note that the TwinCAT devices are still performing as normal. This issue affects TwinCAT 2 version 2304 and prior and TwinCAT 3.1 version 4204.0 and prior. File data ot500343.nasl...

Schneider-electric Modicon Improper Check for Unusual or Exceptional Conditions

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium see security notification for specific versions which could cause a Denial of Service of the controller when reading specific memory blocks using...

Beckhoff Ipc Improper Access Control

Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, which allows remote attackers to cause a denial of service reboot or shutdown, create arbitrary users, or possibly have unspecified other impact via a crafted request, as demonstrated by a...

Rockwellautomation Factorytalk Deserialization of Untrusted Data

In Rockwell Automation all versions of FactoryTalk Diagnostics software, a subsystem of the FactoryTalk Services Platform, FactoryTalk Diagnostics exposes a .NET Remoting endpoint via RNADiagnosticsSrv.exe at TCPtcp/8082, which can insecurely deserialize untrusted data. File data ot500365.nasl...

Codesys Control Out-of-bounds Write

CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow. File data ot500373.nasl...

Rockwellautomation Arena Unspecified Vulnerability

A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena...

Rockwellautomation Micrologix Use of Hard-coded Credentials

Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, The cryptographic key utilized to help protect the account password is hard coded into the RSLogix 500 binary file...

Beckhoff Embedded Unspecified Vulnerability

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification ADS TwinCAT components might allow remote attackers to obtain access via the 1 Windows CE Remote Configuration Tool, 2 CE Remote Display service, or 3 TELNET service. File data ot500333.nasl...

Abb Relion Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior outside the intended directory. File data ot500359.nasl...

Beckhoff Twincat Divide By Zero

When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending a malformed UDP packet to the device. This issue affects TwinCAT 2 version 2304 and prior and TwinCAT 3.1 version 4204.0 and prior. File data ot500344.nasl...

Beckhoff Twincat Improper Input Validation

Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerability to obtain SYSTEM privileges. File data ot500341.nasl...

Microsoft Windows SMBv3 Compression RCE (ADV200005)(CVE-2020-0796)(Deprecated)

This plugin has been deprecated due to an out-of-band patch being release by the vendor. The suggested mitigation provided in ADV200005 is no longer required. Plugin 134428 should be used instead to verify the patch is properly applied. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Schneider-electric Modicon Improper Restriction of Operations within the Bounds of a Memory Buffer

The Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules allow remote authenticated users to cause a denial of service module crash via crafted FTP traffic, as demonstrated by the FileZilla FTP client. File data ot500046.nasl...

Siemens Simatic Improper Input Validation

Specially crafted PROFINET DCP broadcast packets could cause a Denial-of-Service condition of affected products on a local Ethernet segment Layer 2. Human interaction is required to recover the systems. PROFIBUS interfaces are not affected. File data ot500277.nasl...

Schneider-electric Modicon Cleartext Transmission of Sensitive Information

A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules all firmware versions, which could cause information disclosure when using the FTP protocol. File data ot500240.nasl...

Schneider-electric Somachine Improper Input Validation

A Environment CWE-2 vulnerability exists in SoMachine Basic, all versions, and Modicon M221all references, all versions prior to firmware V1.10.0.0 which could cause remote launch of SoMachine Basic when sending crafted ethernet message. File data ot500329.nasl...