Siemens Sinamics Perfect Harmony GH180 6SR41022C3870 Medium-Voltage Drive

Binary data 765170.prm...

Siemens Sinamics Perfect Harmony GH180 6SR41022C4120 Medium-Voltage Drive

Binary data 765172.prm...

Siemens Sinamics Perfect Harmony GH180 6SR52020D3700 Medium-Voltage Drive

Binary data 765211.prm...

Siemens Sinamics Perfect Harmony GH180 6SR52020F4120 Medium-Voltage Drive

Binary data 765202.prm...

Siemens Sinamics Perfect Harmony GH180 6SR52020E3800 Medium-Voltage Drive

Binary data 765198.prm...

Siemens Sinamics Perfect Harmony GH180 Drives Uncontrolled Resource Consumption DoS (ICSA-19-134-05)

Binary data 720305.prm...

CVE-2019-6574

A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- All Versions with option G21, G22, G23, G26, G28, G31, G32, G38, G43 or G46, SINAMICS PERFECT HARMONY GH180 with NXG II control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- All...

CVE-2019-6578

A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- All Versions with option G28, SINAMICS PERFECT HARMONY GH180 with NXG II control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- All Versions with option G28. A denial of service...

Code injection

A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- All Versions with option G21, G22, G23, G26, G28, G31, G32, G38, G43 or G46, SINAMICS PERFECT HARMONY GH180 with NXG II control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- All...

Denial of service

A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- All Versions with option G28, SINAMICS PERFECT HARMONY GH180 with NXG II control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- All Versions with option G28. A denial of service...

CVE-2019-6578

CVE-2019-6578 affects Siemens SINAMICS PERFECT HARMONY GH180 drives (NXG I/II) with option G28, where an attacker with network access can trigger a denial-of-service via uncontrolled resource consumption on the Ethernet Modbus interface. No privileges or user interaction are required; impact is a...

CVE-2019-6578

A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- All Versions with option G28, SINAMICS PERFECT HARMONY GH180 with NXG II control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- All Versions with option G28. A denial of service...

CVE-2019-6574

CVE-2019-6574 affects Siemens SINAMICS PERFECT HARMONY GH180 (NXG I/NXG II) with MLFBs 6SR2...-, 6SR3...-, 6SR4...- (options G21–G46). Root cause: improperly configured Parameter Read/Write execution via Fieldbus network, enabling a remote attacker with network access to restart the controller an...

CVE-2019-6574

A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- All Versions with option G21, G22, G23, G26, G28, G31, G32, G38, G43 or G46, SINAMICS PERFECT HARMONY GH180 with NXG II control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- All...

Multiple Siemens Products Access Control Error Vulnerabilities

Siemens SINAMICS PERFECT HARMONY GH180 is a high-voltage AC frequency converter from Siemens Germany. An access control error vulnerability exists in several Siemens products. The vulnerability stems from a network system or product that does not properly restrict access to resources from...

ICSA-19-134-05 Siemens SINAMICS PERFECT HARMONY GH180 Drives NXG I and NXG II

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SINAMICS PERFECT HARMONY GH180 Drives NXG I and NXG II Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could...

ICSA-19-134-06 Siemens SINAMICS PERFECT HARMONY GH180 Fieldbus Network

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SINAMICS PERFECT HARMONY GH180 Fieldbus Network Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a...

perfect-medtabs.com XSS vulnerability

Open Bug Bounty ID: OBB-716132 Description| Value ---|--- Affected Website:| perfect-medtabs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

ICSA-18-345-01 McAfee SINAMICS PERFECT HARMONY GH180

1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Low skill level to exploit Vendor: McAfee Equipment: SINAMICS PERFECT HARMONY GH180 Vulnerability: Improper Access Control 2. RISK EVALUATION These files can be executed to compromise the HMI, and by extension, the drive system. 3. TECHNICAL DETAILS...

Cross-Platform Post-Exploitation HTTP/2 Command & Control Server: Merlin

Merlin is a cross-platform post-exploitation framework that leverages HTTP/2 communications to evade inspection. HTTP/2 is a relatively new protocol that requests Perfect Forward Secrecy PFS encryption cipher suites are used. The use of these cipher suites makes it incredibly difficult to capture...