Siemens SIMATIC Industrial Products Operation On a Resource After Expiration or Release (CVE-2021-37185)

A vulnerability has been identified in SIMATIC Drive Controller family All versions = V2.9.2 = V21.9 = V4.5.0 = V2.9.2 = V21.9 = V4.0 V4.0 SP1, SIPLUS TIM 1531 IRC All versions V2.3.6, TIM 1531 IRC All versions V2.3.6. An unauthenticated attacker could cause a denial- of-service condition in a PL...

CVE-2019-19281

A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions = V2.5 and = V2.5 and = V2.5 and V20.8. Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a Denial-of-Service condition. The...

PT-2020-2552

Name of the Vulnerable Software and Affected Versions SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants versions 2.5 through 20.7 SIMATIC S7-1500 CPU family incl. related ET200 CPUs and SIPLUS variants versions 2.5 through 2.7 SIMATIC S7-1500 Software Controller versions 2.5...

Xovis PC2, PC2R and PC3 Sensor Cross-Site Request Forgery Vulnerability

The Xovis PC2, PC2R and PC3 are all sensor devices from Xovis USA. A cross-site request forgery vulnerability exists in the Xovis PC2, PC2R, and PC3 sensors using firmware version 3.6.0 and earlier, which can be exploited by remote attackers to perform unauthorized operations...

Directory traversal

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow Directory Traversal...

CVE-2018-11719

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow XXE...

CVE-2018-11718

Xovis PC2, PC2R and PC3 devices (firmware up to 3.6.0) are affected by a CSRF vulnerability. The connected CNVD entry explicitly describes a cross-site request forgery path impacting these sensors; no exploitation details, impact quantification, or official remediation/version fixes are provided ...

CVE-2018-11719

Xovis PC2, PC2R, and PC3 sensors are affected by an XML External Entity (XXE) vulnerability in firmware 3.6.0 and earlier, enabling information disclosure through XML processing. The issue is documented as CVE-2018-11719 with linked CNVD-2019-02471 details. Affected products are Xovis PC2/PC2R/PC...

CVE-2018-11720

The CVE affects Xovis PC2, PC2R, and PC3 sensor devices with firmware versions 3.6.0 and earlier, via a directory traversal vulnerability that can disclose information. This is documented in CNVD-2019-02470 and corroborated by other CVE records; no exploitation details or remediation are provided...

PT-2018-10779

Name of the Vulnerable Software and Affected Versions Xovis PC2, PC2R, and PC3 devices versions through 3.6.0 Description The issue allows Directory Traversal. Recommendations For Xovis PC2, PC2R, and PC3 devices versions through 3.6.0, update to a version later than 3.6.0 to resolve the issue...

PT-2018-10776

Name of the Vulnerable Software and Affected Versions Xovis PC2, PC2R, and PC3 devices versions through 3.6.0 Description The issue allows for CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations For Xovis PC2, PC2R, and PC3...

PT-2018-10777

Name of the Vulnerable Software and Affected Versions Xovis PC2, PC2R, and PC3 devices versions through 3.6.0 Description The issue allows XXE XML External Entity attacks. Recommendations For Xovis PC2, PC2R, and PC3 devices versions through 3.6.0, update to a version later than 3.6.0 to resolve...

CVE-2018-11719: Improper Restriction of XML External Entity Reference

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow XXE...

CVE-2018-11720: Improper Limitation of a Pathname to a Restricted Directory

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow Directory Traversal...

CVE-2018-11718: Cross-Site Request Forgery (CSRF)

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow CSRF...

Unfixed XSS vulnerability at lariccia-pc2.pg.infn.it

Security researcher Vagrant, has submitted on 31/05/2007 a cross-site-scripting XSS vulnerability affecting lariccia-pc2.pg.infn.it, which at the time of submission ranked 34995 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It is...