Lucene search
+L

1178 matches found

Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.26 views

Schweitzer Engineering Laboratories RTAC Improper Input Validation (CVE-2013-2792)

Schweitzer Engineering Laboratories SEL SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow remote attackers to cause a denial of service infinite loop via a crafted DNP3 TCP packet. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

7.1CVSS5.5AI score0.01878EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.27 views

Siemens SIMATIC S7-1200 CPU Family Denial of Service (CVE-2013-0700)

Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service defect-mode transition and control outage via crafted packets to TCP port 102 aka the ISO-TSAP port. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mo...

7.8CVSS5.5AI score0.02392EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.25 views

Rockwell Automation Allen-Bradley Micrologix 1100 Improper Handling of Length Parameter Inconsistency (CVE-2020-6111)

An exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley MicroLogix 1100 Programmable Logic Controller Systems Series B FRN 16.000, Series B FRN 15.002, Series B FRN 15.000, Series B FRN 14.000, Series B FRN 13.000, Series B FRN 12.000, Series B FRN 11.000...

7.5CVSS7.2AI score0.05555EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.31 views

Rockwell Automation Allen-Bradley CompactLogix and Compact GuardLogix Improper Input Validation (CVE-2017-9312)

Improperly implemented option-field processing in the TCP/IP stack on Allen-Bradley L30ERMS safety devices v30 and earlier causes a denial of service. When a crafted TCP packet is received, the device reboots immediately. This plugin only works with Tenable.ot. Please visit...

7.8CVSS7.1AI score0.04392EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.63 views

Siemens SIMATIC S7-1200 and S7-1500 CPU Families Improper Restriction of Operations Within the Bounds of a Memory Buffer (CVE-2020-15782)

A vulnerability has been identified in SIMATIC Drive Controller family All versions V2.9.2, SIMATIC ET 200SP Open Controller CPU 1515SP PC incl. SIPLUS variants All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions V21.9, SIMATIC S7-1200 CPU family incl...

9.8CVSS8.5AI score0.05184EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.48 views

Rockwell Automation Controllers Denial Of Service (CVE-2012-6439)

Rockwell Automation EtherNet/IP products allow remote attackers to cause a denial of service control and communication outage via a CIP message that modifies the 1 configuration or 2 network parameters. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-...

8.5CVSS5.4AI score0.2318EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.17 views

Fortinet OT Asset Information

It is possible to obtain attributes of the remote Fortinet OT device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ...

5.5AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.32 views

Siemens SIMATIC Improper Certificate Validation (CVE-2012-3037)

The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof the S7-1200 web server by using this key to create a forged certificate. This plugin only works with Tenable.ot. Plea...

4.3CVSS7.2AI score0.01472EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.26 views

Rockwell Automation 1794-AENT Flex I/O Series B Buffer Copy Without Checking Size of Input (CVE-2020-6086)

An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen- Bradley Flex IO 1794-AENT/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious...

7.8CVSS7.1AI score0.04263EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.26 views

Siemens SIMATIC S7-1500 CPU Improper Input Validation (CVE-2018-16559)

A vulnerability has been identified in SIMATIC S7-1500 CPU All versions = V2.0 and V2.5, SIMATIC S7-1500 CPU All versions = V1.8.5. Specially crafted network packets sent to port 80/tcp or 443/tcp could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the device...

7.8CVSS7.1AI score0.01986EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.23 views

Siemens SICAM MMU, SICAM T, and SICAM SGU Authentication Bypass By Capture-Replay (CVE-2020-10045)

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. An error in the challenge-response procedure could allow an attacker to replay authentication traffic and gain access to protected areas of the web application. This plugin onl...

8.8CVSS7.8AI score0.01066EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.849 views

Schneider Electric Modicon Controllers and Software Authentication Bypass By Spoofing (CVE-2021-22779)

Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert all versions prior to V15.0 SP1, including all versions of Unity Pro, EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert all versions, including all versions of EcoStruxure Hybrid DCS, SCADAPack...

9.1CVSS8.7AI score0.01023EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.13 views

Dell OT Asset Information

It is possible to obtain attributes of the remote Dell OT device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if...

5.5AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.25 views

Rockwell Automation Micrologix Improper Access Control (CVE-2017-14468)

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

10CVSS7.3AI score0.37965EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.25 views

Yokogawa CENTUM Improper Authentication (CVE-2020-5608)

CAMS for HIS CENTUM CS 3000 includes CENTUM CS 3000 Small R3.08.10 to R3.09.50, CENTUM VP includes CENTUM VP Small, Basic R4.01.00 to R6.07.00, B/M9000CS R5.04.01 to R5.05.01, and B/M9000 VP R6.01.01 to R8.03.01 allows a remote unauthenticated attacker to bypass authentication and send altered...

9.8CVSS7.4AI score0.01587EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.29 views

Rockwell Automation Micrologix Improper Access Control (CVE-2017-14473)

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

10CVSS7.4AI score0.37965EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.25 views

Siemens SIPROTEC 5 relays Buffer Copy Without Checking Size of Input (CVE-2021-33720)

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

7.5CVSS7.2AI score0.01037EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.30 views

Rockwell Automation 1794-AENT Flex I/O Series B Buffer Copy Without Checking Size of Input (CVE-2020-6085)

An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen- Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a...

7.8CVSS7.1AI score0.04263EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.20 views

VMware OT Asset Information

It is possible to obtain attributes of the remote VMware OT device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if...

5.5AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.22 views

Siemens SIMATIC S7 Uncontrolled Resource Consumption (CVE-2019-13940)

A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU All versions V3.X.17, SIMATIC ET 200pro IM154-8F PN/DP CPU All versions V3.X.17, SIMATIC ET 200pro IM154-8FX PN/DP CPU All versions V3.X.17, SIMATIC ET 200S IM151-8 PN/DP CPU All versions V3.X.17, SIMATIC ET 200S IM151-8F...

7.5CVSS7AI score0.01702EPSS
SaveExploits0References3
Rows per page
Query Builder