Siemens SIMATIC Industrial Products Operation On a Resource After Expiration or Release (CVE-2021-37185)

A vulnerability has been identified in SIMATIC Drive Controller family All versions = V2.9.2 = V21.9 = V4.5.0 = V2.9.2 = V21.9 = V4.0 V4.0 SP1, SIPLUS TIM 1531 IRC All versions V2.3.6, TIM 1531 IRC All versions V2.3.6. An unauthenticated attacker could cause a denial- of-service condition in a PL...

CVE-2019-19281

A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions = V2.5 and = V2.5 and = V2.5 and V20.8. Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a Denial-of-Service condition. The...

Xovis PC2, PC2R and PC3 Sensor Cross-Site Request Forgery Vulnerability

The Xovis PC2, PC2R and PC3 are all sensor devices from Xovis USA. A cross-site request forgery vulnerability exists in the Xovis PC2, PC2R, and PC3 sensors using firmware version 3.6.0 and earlier, which can be exploited by remote attackers to perform unauthorized operations...

Directory traversal

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow Directory Traversal...

CVE-2018-11719

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow XXE...

CVE-2018-11719

Xovis PC2, PC2R, and PC3 sensors are affected by an XML External Entity (XXE) vulnerability in firmware 3.6.0 and earlier, enabling information disclosure through XML processing. The issue is documented as CVE-2018-11719 with linked CNVD-2019-02471 details. Affected products are Xovis PC2/PC2R/PC...

CVE-2018-11718

Xovis PC2, PC2R and PC3 devices (firmware up to 3.6.0) are affected by a CSRF vulnerability. The connected CNVD entry explicitly describes a cross-site request forgery path impacting these sensors; no exploitation details, impact quantification, or official remediation/version fixes are provided ...

CVE-2018-11720

The CVE affects Xovis PC2, PC2R, and PC3 sensor devices with firmware versions 3.6.0 and earlier, via a directory traversal vulnerability that can disclose information. This is documented in CNVD-2019-02470 and corroborated by other CVE records; no exploitation details or remediation are provided...

Unfixed XSS vulnerability at lariccia-pc2.pg.infn.it

Security researcher Vagrant, has submitted on 31/05/2007 a cross-site-scripting XSS vulnerability affecting lariccia-pc2.pg.infn.it, which at the time of submission ranked 34995 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It is...