1750 matches found
CVE-2021-21002
CVE-2021-21002 affects Phoenix Contact FL COMSERVER UNI in versions
CVE-2021-21002 Denial of Service in Phoenix Contact FL COMSERVER UNI products
In Phoenix Contact FL COMSERVER UNI in versions 2.40 a invalid Modbus exception response can lead to a temporary denial of service...
Phoenix Contact FL COMSERVER UNI 安全漏洞
The Phoenix Contact FL COMSERVER UNI is an interface converter from Phoenix Contac Phoenix Contact, Germany. Serial Device Server for Converting Serial 232/422/485 Interfaces to Ethernet A security vulnerability exists in the Phoenix Contact FL COMSERVER UNI, which stems from an invalid Modbus...
Phoenix Contact AXL F BK and IL BK 信任管理问题漏洞
Phoenix Contact AXL F BK PN is a bus coupler from Phoenix Contact, Germany. A security vulnerability exists in the Phoenix Contact AXL F BK and IL BK that stems from the program having undocumented password-protected FTP access to the root directory...
Phoenix Contact FL SWITCH竞争条件问题漏洞
The Phoenix Contact FL SWITCH is an industrial grade Ethernet switch from Phoenix Contact, Germany. A security vulnerability exists in the Phoenix Contact FL SWITCH SMCS, which can be exploited by an attacker to send a manual tcp packet with the emergency flag set and the emergency pointer set to...
Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 安全漏洞
The Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 are industrial control devices from Phoenix Contact, Germany. The protocol configuration for device management and communication does not include authentication measures. Phoenix Contact Classic Line Controllers versions ILC1x0 and...
Phoenix Contact Classic Automation Worx Software Suite 缓冲区错误漏洞
Phoenix Contact Classic Automation is a division of Phoenix Contac Phoenix Contact, a German company that provides surplus parts and Phoenix Contact repair services. A security vulnerability exists in Software Suite 1.87 and prior versions, which stems from a vulnerability that can be exploited b...
Phoenix Contact FL SWITCH 安全漏洞
Phoenix Contact FL SWITCH is an industrial Ethernet switch from Phoenix Contact, Germany.TCP Transmission Control Protocol is a connection-oriented, reliable, byte-stream-based transport layer communication protocol defined by the IETF RFC 793. TCP Transmission Control Protocol is a...
Phoenix Contact FL SWITCH 跨站脚本漏洞
The Phoenix Contact FL SWITCH is an industrial grade Ethernet switch from Phoenix Contact, Germany. A security vulnerability exists in the Phoenix Contact FL SWITCH SMCS, which can be exploited by an attacker to insert malicious code into the web management via LLDP frames, which can then be...
Directory Traversal Vulnerability in Xiamen Phoenix Chuangyi Software Ltd.'s Chuangyi 100VR Visualization Intelligent Interactive Teaching Cloud Platform
The business scope of Xiamen Phoenix Chuangyi Software Co., Ltd. includes: software development; Internet information services; book publishing; newspaper publishing, and so on. Xiamen Phoenix Chuangyi Software Co., Ltd Chuangyi 100VR visualization intelligent interactive teaching cloud platform...
CVE-2021-33542
Phoenix Contact Classic Automation Worx Software Suite in Version 1.87 and below is affected by a remote code execution vulnerability. Manipulated PC Worx or Config+ projects could lead to a remote code execution when unallocated memory is freed because of incompletely initialized data. The...
Multi-vendor BIOS Security Vulnerabilities (June 2021) - Lenovo Support US
No description provided...
Insurance Firm CNA Financial Reportedly Paid Hackers $40 Million in Ransom
U.S. insurance company CNA Financial reportedly paid $40 million to a ransomware group to regain access to its systems after a cyberattack in March, marking one of the largest known ransom payments to date. The payment was first reported by Bloomberg, which cited people familiar with the incident...
Phoenix Contact Automationworx XML File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Phoenix Contact Automationworx. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Insurance Giant CNA Hit with Novel Ransomware Attack
A novel ransomware attack forced insurance giant CNA to take systems offline and temporarily shutter its website. The attack occurred earlier this week and leveraged a new variant of the Phoenix CryptoLocker malware. The Chicago-based company—the seventh largest commercial insurance provider in t...
360 Security Browser suffers from dll hijacking vulnerability (CNVD-2021-11809)
360 Security Browser 360 Security Browser is a browser based on the dual kernel of IE and Chrome launched by 360 Security Center, which is a product of cooperation between Window of the World developer Phoenix Studio and 360 Security Center. 360 Security Browser has a dll hijacking vulnerability,...
OsCommerce Phoenix CE Command Injection (CVE-2020-27976)
A command injection vulnerability exists in OsCommerce Phoenix CE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Unspecified Vulnerability in Phoenix Contact mGuard Devices
Phoenix Contact Mguard is a firewall device for industrial environments from Phoenix Contac. The device features multiple protection modes, deep packet inspection, malware and virus detection. A security vulnerability exists in Phoenix Contact mGuard Devices, which stems from the fact that for...
Phoenix Contact PLCnext Control Devices Cross-Site Scripting Vulnerability
Phoenix Contact PLCnext Control Devices is a programmable logic controller for industrial environments from Phoenix Contact. A cross-site scripting vulnerability exists in Phoenix Contact PLCnext Control Devices prior to version 2021.0 LTS, which originates from an authenticated, low-privileged...
Phoenix Contact PLCnext Control Devices Input Validation Error Vulnerability
Phoenix Contact PLCnext Control Devices is a programmable logic controller for industrial environments from Phoenix Contact. An input validation error vulnerability exists in Phoenix Contact PLCnext Control Devices prior to version 2021.0 LTS, which stems from a specially designed LLDP packet tha...