Siemens Sicam Unspecified Vulnerability

An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing the database. File data ot500097.nasl...

Schneider-electric Micom Insufficient Session Expiration

A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x P540 range excluded with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 DNP3oE if an older...

Yokogawa B\/m Improper Access Control

License Manager Service of YOKOGAWA products CENTUM VP R5.01.00 - R6.06.00, CENTUM VP Entry Class R5.01.00 - R6.06.00, ProSafe-RS R3.01.00 - R4.04.00, PRM R4.01.00 - R4.02.00, B/M9000 VPR7.01.01 - R8.02.03 allows remote attackers to bypass access restriction to send malicious files to the PC wher...

Rockwellautomation Ab Unspecified Vulnerability

Rockwell Automation Allen-Bradley MicroLogix controller 1100, 1200, 1400, and 1500; SLC 500 controller platform; and PLC-5 controller platform, when Static status is not enabled, allow remote attackers to cause a denial of service via messages that trigger modification of status bits. File data...

Enea Ose Improper Control of Generation of Code ('Code Injection')

The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote attackers to upload files and consequently execute arbitrary code via unspecified vectors. File data...

Schneider-electric Modicon Insufficiently Protected Credentials

An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials...

Schneider-electric Modicon Authentication Bypass by Capture-replay

An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product all references, all versions prior to firmware V1.6.2.0. The vulnerability allows unauthorized users to replay authentication sequences. If an attacker exploits this vulnerability and connects to a...

Rockwellautomation Factorytalk Improper Input Validation

The FactoryTalk FT RNADiagReceiver service in Rockwell Automation Allen-Bradley FactoryTalk CPR9 through SR5 and RSLogix 5000 17 through 20 does not properly handle the return value from an unspecified function, which allows remote attackers to cause a denial of service service outage via a craft...

Yokogawa Exaopc Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in BKFSimvhfd.exe in Yokogawa CENTUM CS 1000, CENTUM CS 3000 R3.09.50 and earlier, CENTUM VP R5.03.20 and earlier, Exaopc R3.72.00 and earlier, B/M9000CS R5.05.01 and earlier, and B/M9000 VP R7.03.01 and earlier, when FCS/Test Function is enabled, allows remote attacke...

Windriver Vxworks Unspecified Vulnerability

Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report. File data ot500056.nasl...

Rockwellautomation Factorytalk Unspecified Vulnerability

Untrusted search path vulnerability in the Clean Utility application in Rockwell Automation FactoryTalk Services Platform before 2.71.00 and FactoryTalk View Studio 8.00.00 and earlier allows local users to gain privileges via a Trojan horse DLL in an unspecified directory. File data ot500135.nas...

Rockwellautomation Micrologix Unspecified Vulnerability

An exploitable denial of service vulnerability exists in the program download functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a device fault resulting in halted operations. An attacker can send an unauthenticated packet to trigger...

Siemens Controller Asset Information

This plugin returns asset information for a Siemens controller. File data ot500015.nasl...

Siemens Simatic Unspecified Vulnerability

The random-number generator on Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms and hijack sessions via unspecified vectors, a different vulnerability than...

Yokogawa Exaopc Improper Access Control

BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x through R5.04.00, and Exaopc through R3.72.10, does not require authentication, which allows remote attackers to read arbitrary files via a RETR operation, write to...

Schneider-electric Modicon Improper Input Validation

A CWE-807: Reliance on Untrusted Inputs in a Security Decision vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause invalid information displayed in Unity Pro software. File data ot500234.nasl...

Rockwell Controller Asset Information

This plugin returns asset information for a Rockwell controller. File data ot500012.nasl...

Schneider-electric Modicon Improper Authentication

Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors. File data ot500033.nasl...

Honeywell Controller Asset Information

This plugin returns asset information for a Honeywell controller. File data ot500007.nasl...

Schneider-electric Modicon Improper Control of Generation of Code ('Code Injection')

In Modicon Quantum all firmware versions, a CWE-94: Code Injection vulnerability could cause an unauthorized firmware modification with possible Denial of Service when using Modbus protocol. File data ot500209.nasl...