Malicious Package

Overview ot-logger is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

ROS-20220721-02

A vulnerability in the Harfbuzz text conversion library involves an integer overflow in the hb-ot-shape-fallback.cc file. Exploitation of the vulnerability could allow an attacker acting remotely to pass specially crafted data to an application, cause an integer overflow, and cause the applicatio...

Siemens EN100 Ethernet Module Improper Restriction of Operations Within the Bounds of a Memory Buffer (CVE-2022-30938)

A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant All versions, EN100 Ethernet module IEC 104 variant All versions, EN100 Ethernet module IEC 61850 variant All versions V4.40, EN100 Ethernet module Modbus TCP variant All versions, EN100 Ethernet module PROFINET IO varia...

Industrial systems: What it takes to secure and staff them

The security community is continuously changing, growing, and learning from each other to better position the world against cyberthreats. In the latest post of our Community Voices blog series, Microsoft Security Senior Product Marketing Manager Brooke Lynn Weenig talks with Patrick C. Miller,...

Malicious code in ot-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dad5cdded9388aee82059159f70f7d7e584e0660a0fc7659619289333b14fb70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in create-ot-express-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269d815f0f72dcbee5d8320d8fdc6dfb67256e41db6c462544a0fb234cfbf97c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5139 Malicious code in ot-menu-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4719e9ae5efca357fd891b2be9fde0c17cd90faa6c67a1c4955e7e1f811cfe29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2230 Malicious code in create-ot-express-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 269d815f0f72dcbee5d8320d8fdc6dfb67256e41db6c462544a0fb234cfbf97c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ot-pausedetector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c29b4ba669bb741f074eb27f5c671dbe0f9e7376cda6b3f855fb2849338f5f18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ot-menu-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4719e9ae5efca357fd891b2be9fde0c17cd90faa6c67a1c4955e7e1f811cfe29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ot-daily-algorithm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 498245e71f08cf45b257ade99fc455f3a37bdc156a9849d8e6a79d7b40124605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5141 Malicious code in ot-performance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f95260b8471bef6c94e381a82e48e888ae8a72f504b3a2e72b0890dde5242a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ot-performance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f95260b8471bef6c94e381a82e48e888ae8a72f504b3a2e72b0890dde5242a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5137 Malicious code in ot-daily-algorithm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 498245e71f08cf45b257ade99fc455f3a37bdc156a9849d8e6a79d7b40124605 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5138 Malicious code in ot-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dad5cdded9388aee82059159f70f7d7e584e0660a0fc7659619289333b14fb70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5140 Malicious code in ot-pausedetector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c29b4ba669bb741f074eb27f5c671dbe0f9e7376cda6b3f855fb2849338f5f18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OSV-2022-613 UNKNOWN READ in OT::avar::map_coords

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49407 Crash type: UNKNOWN READ Crash state: OT::avar::mapcoords hbotvarnormalizevariations test-ot-face.c...

Siemens SCALANCE X Switch Devices Buffer Copy Without Checking Size of Input (CVE-2022-26649)

A vulnerability has been identified in SCALANCE X200-4P IRT All versions, SCALANCE X200-4P IRT All versions, SCALANCE X201-3P IRT All versions, SCALANCE X201-3P IRT All versions, SCALANCE X201-3P IRT PRO All versions, SCALANCE X201-3P IRT PRO All versions, SCALANCE X202-2IRT All versions, SCALANC...

Hackers Distributing Password Cracking Tool for PLCs and HMIs to Target Industrial Systems

Industrial engineers and operators are the target of a new campaign that leverages password cracking software to seize control of Programmable Logic Controllers PLCs and co-opt the machines to a botnet. The software "exploited a vulnerability in the firmware which allowed it to retrieve the...

Yokogawa CAMS for HIS Violation of Secure Design Principles (CVE-2022-30707)

Violation of secure design principles exists in the communication of CAMS for HIS. Affected products and versions are CENTUM series where LHS4800 is installed CENTUM CS 3000 and CENTUM CS 3000 Small R3.08.10 to R3.09.00, CENTUM series where CAMS function is used CENTUM VP, CENTUM VP Small, and...