Lucene search
+L

1508 matches found

CISA
CISA
•added 2020/09/03 12:00 a.m.•23 views

CISA Releases Final Binding Operational Directive on Developing a Vulnerability Disclosure Policy

The Cybersecurity and Infrastructure Security Agency CISA has released Binding Operational Directive BOD 20-01, Develop and Publish a Vulnerability Disclosure Policy VDP. BOD 20-01 requires each federal agency to publish a VDP. Publication of agency VDPs will make it easier for users to report...

6.9AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/08/26 12:00 a.m.•12 views

The vulnerability of the NPort IAW5000A-I/O Series web server software lies in the lack of protection for service data, which allows attackers to disclose the protected information.

The vulnerability of the NPort IAW5000A-I/O Series web server software is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

5.3CVSS5.4AI score
SaveExploits0References1Affected Software1
FireEye
FireEye
•added 2020/08/25 12:00 a.m.•22 views

A Hands-On Introduction to Mandiant's Approach to OT Red Teaming

Operational technology OT asset owners have historically considered red teaming of OT and industrial control system ICS networks to be too risky due to the potential for disruptions or adverse impact to production systems. While this mindset has remained largely unchanged for years, Mandiant's...

0.2AI score
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2020/08/12 12:00 a.m.•11 views

The vulnerability of InnoDB component in the Oracle MySQL Server database management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the MySQL...

4CVSS6.3AI score0.01756EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/08/05 12:00 a.m.•10 views

The vulnerability of the “hidden mode” component of the LibreOffice office suite, which allows a hacker to gain access to confidential data

The vulnerability of the LibreOffice office suite is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

5.3CVSS6.2AI score0.01944EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
•added 2020/08/05 12:00 a.m.•11 views

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in the lack of protection for operational data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

5.3CVSS6.7AI score0.00547EPSS
SaveExploits0References2Affected Software1
ThreatPost
ThreatPost
•added 2020/08/04 12:19 p.m.•35 views

Podcast: Learning to ‘Speak the Language’ of OT Security Teams

Andrew Ginter, VP Industrial Security at Waterfall Security Solutions. Information technology IT and operational technology OT may have many of the same objectives – but too often they don’t see eye-to-eye when it comes to top priorities, said Andrew Ginter, VP Industrial Security at Waterfall...

7AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2020/07/31 12:30 p.m.•750 views

dazzleUP - A Tool That Detects The Privilege Escalation Vulnerabilities Caused By Misconfigurations And Missing Updates In The Windows OS

A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems. dazzleUP detects the following vulnerabilities. Exploit Checks The first feature of dazzleUP is that it uses Windows Update Agent API instead of WMI like...

10CVSS8.7AI score0.9981EPSS
SaveExploits186References1
BDU FSTEC
BDU FSTEC
•added 2020/07/31 12:00 a.m.•19 views

The vulnerability of Microsoft Office, Microsoft Word, and Microsoft SharePoint packages lies in the lack of protection for operational data, which allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft Office, Microsoft Word, and Microsoft SharePoint lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS6.2AI score0.06119EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2020/07/29 11:12 a.m.•10 views

Industrial VPN Flaws Could Let Attackers Target Critical Infrastructures

Cybersecurity researchers have discovered critical vulnerabilities in industrial VPN implementations primarily used to provide remote access to operational technology OT networks that could allow hackers to overwrite data, execute malicious code, and compromise industrial control systems ICS. A n...

10CVSS8.5AI score0.03984EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2020/07/23 12:00 a.m.•15 views

The vulnerability of the centralized management system of McAfee Network Security Management (NSM) is related to the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the centralized management system of McAfee Network Security Management NSM is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by executing specially created...

8.6CVSS7.2AI score0.00371EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/07/23 12:00 a.m.•10 views

The vulnerability of the microprogrammed industrial Ethernet switch Moxa MGate 5105-MB-EIP lies in the lack of protection for operational data, allowing an intruder to gain unauthorized access to the protected information.

The vulnerability of the microprogrammed industrial Ethernet switch Moxa MGate 5105-MB-EIP lies in the lack of protection for operational data. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

7.8CVSS5.5AI score
SaveExploits0References3Affected Software1
FireEye
FireEye
•added 2020/07/20 5:30 p.m.•124 views

Unique Threats to Operational Technology and Cyber Physical Systems

In this latest episode of our Eye on Security podcast, I talk all about the world of operational technology OT and cyber physical systems with one of our foremost experts on the topic: Nathan Brubaker, Senior Manager of Analysis for Mandiant Threat Intelligence. Nathan kicked off our chat by...

0.2AI score
SaveExploits0References5
FireEye
FireEye
•added 2020/07/15 12:00 a.m.•37 views

Financially Motivated Actors Are Expanding Access Into OT: Analysis of Kill Lists That Include OT Processes Used With Seven Malware Families

Mandiant Threat Intelligence has researched and written extensively on the increasing financially motivated threat activity directly impacting operational technology OT networks. Some of this research is available in our previous blog posts on industrial post-compromise ransomware and FireEye's...

0.1AI score
SaveExploits0References3
ICS
ICS
•added 2020/07/14 12:00 a.m.•84 views

Siemens SIMATIC HMI Panels

1. EXECUTIVE SUMMARY CVSS v3 5.7 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC HMI Panels Vulnerability: Cleartext Transmission of Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...

6.5CVSS6.6AI score0.00332EPSS
SaveExploits0References9
ThreatPost
ThreatPost
•added 2020/07/07 1:18 p.m.•17 views

Podcast: Securing Railway Systems Against Hacks

Dr. Jesus Molina Railway systems are becoming increasingly digital – from digital signaling systems to remote monitoring functions – and this is opening the door for sophisticated bad actors to launch various malicious cyberattacks. Dr. Jesus Molina, director of Industrial IOT with Waterfall...

0.8AI score
SaveExploits0References5
Trend Micro Simply Security
Trend Micro Simply Security
•added 2020/07/06 7:52 p.m.•22 views

Beyond the Endpoint: Why Organizations are Choosing XDR for Holistic Detection and Response

The endpoint has long been a major focal point for attackers targeting enterprise IT environments. Yet increasingly, security bosses are being forced to protect data across the organization, whether it’s in the cloud, on IoT devices, in email, or on-premises servers. Attackers may jump from one...

0.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2020/07/03 12:00 a.m.•15 views

The vulnerability of the command-line interface (CLI) of the Cisco Network Services Orchestrator software allows a hacker to disclose protected information.

The vulnerability of the command-line interface CLI of the Cisco Network Services Orchestrator software lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is supposed to be secure...

4.7CVSS5.4AI score0.00254EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2020/06/29 2:15 p.m.•39 views

CVE-2020-12040

Sigma Spectrum Infusion System v's6.x model 35700BAX and Baxter Spectrum Infusion System Versions 8.x model 35700BAX2 at the application layer uses an unauthenticated clear-text communication channel to send and receive system status and operational data. This could allow an attacker that has...

9.8CVSS0.00948EPSS
SaveExploits1References1
NVD
NVD
•added 2020/06/29 2:15 p.m.•28 views

CVE-2020-12043

The Baxter Spectrum WBM v17, v20D29, v20D30, v20D31, and v22D24 when configured for wireless networking the FTP service operating on the WBM remains operational until the WBM is rebooted...

9.8CVSS0.02098EPSS
SaveExploits0References1
Rows per page
Query Builder