CVE-2020-24686

CVE-2020-24686 affects ABB AC500 V2 with onboard Ethernet. The issue is a denial of service in the PLC’s web visualization component: when exploited, the component stops responding and genuine users lose remote visibility of PLC state. If a user logs in while the vulnerability is exploited, the P...

Denial of Service Vulnerability in GX Works2 (CNVD-2021-16895)

GX Works2 is a PLC programming software. A memory out-of-bounds access vulnerability exists in GX Works2. An attacker could exploit this vulnerability to cause the program to crash...

Memory Out-of-Bounds Access Vulnerability in GX Works2

GX Works2 is a PLC programming software. A memory out-of-bounds access vulnerability exists in GX Works2. An attacker could exploit this vulnerability to cause the program to crash...

Code Injection Vulnerability in GX Works2

GX Works2 is a PLC programming software. A code injection vulnerability exists in GX Works2. An attacker can exploit this vulnerability to gain server privileges...

CVE-2020-24685

An unauthenticated specially crafted packet sent by an attacker over the network will cause a denial-of-service DoS vulnerability. Vulnerability allows attacker to stop the PLC. After stopping ERR LED flashing red, physical access to the PLC is required in order to restart the application. This...

Design/Logic Flaw

An unauthenticated specially crafted packet sent by an attacker over the network will cause a denial-of-service DoS vulnerability. Vulnerability allows attacker to stop the PLC. After stopping ERR LED flashing red, physical access to the PLC is required in order to restart the application. This...

CVE-2020-24685

CVE-2020-24685 affects ABB AC500 V2 with onboard Ethernet versions 2.8.4 and earlier. An unauthenticated, specially crafted network packet can cause a denial-of-service by stopping the PLC; after stop, physical access is required to restart the application. Public documents describe the vulnerabi...

CVE-2020-24685 AC500 V2 unauthenticated crafter packet vulnerability

An unauthenticated specially crafted packet sent by an attacker over the network will cause a denial-of-service DoS vulnerability. Vulnerability allows attacker to stop the PLC. After stopping ERR LED flashing red, physical access to the PLC is required in order to restart the application. This...

ABB Asea Brown Boveri Ltd ABB AC500 V2 Security Breach

ABB Asea Brown Boveri Ltd ABB AC500 V2 is a PLC from ABB Asea Brown Boveri Ltd, Sweden.Suitable for simple control tasks and complex automation solutions. ABB AC500 V2 products with onboard Ethernet version 2.8.4 and prior versions contain a security vulnerability that can be exploited by an...

SIMATIC S7-PLCSM suffers from a denial of service vulnerability (CNVD-2021-05558)

SIMATIC S7-PLCSM is a PLC simulation software developed by Siemens. SIMATIC S7-PLCSM has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

SIMATIC S7-PLCSM suffers from a Denial of Service Vulnerability

SIMATIC S7-PLCSM is a PLC simulation software developed by Siemens. SIMATIC S7-PLCSM has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

Rockwell Automation RSLinx classic ethernet/IP server denial-of-service vulnerability

Summary A denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic 2.57.00.14 CPR 9 SR 3. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of malicious packets to trigger this...

Carnivore - Tool For Assessing On-Premises Microsoft Servers Authentication Such As ADFS, Skype, Exchange, And RDWeb

Carnivore is an assessment tool for Skype for Business, Exchange, ADFS, and RDWeb servers as well as some O365 functionality. Carnivore includes some new post-authentication Skype for Business functionality. Released as open source by NCC Group Plc - https://www.nccgroup.com/ Developed by Chris...

CVE-2020-12516

Older firmware versions FW1 up to FW10 of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack...

CVE-2020-12516

Older firmware versions FW1 up to FW10 of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack...

Denial of service

Older firmware versions FW1 up to FW10 of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack...

CVE-2020-12516 WAGO: PLC families 750-88x and 750-352 prone to DoS attack

Older firmware versions FW1 up to FW10 of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack...

CVE-2020-12516

Summary of CVE-2020-12516 (WAGO PLC 750-88x and 750-352) Older firmware versions FW1–FW10 are vulnerable to an Uncontrolled Resource Consumption (DoS) issue. The vulnerability can be triggered by sending a series of maliciously crafted packets to HTTP(S) ports (80/443), potentially crashing the d...

PT-2020-13150 · Wago · Wago Plc Family 750-352 +1

Name of the Vulnerable Software and Affected Versions: WAGO PLC family 750-88x versions FW1 through FW10 WAGO PLC family 750-352 versions FW1 through FW10 Description: The issue is related to a denial of service attack. Older firmware versions of the WAGO PLC family are affected. Recommendations:...

Schneider Electric EcoStruxure Control Expert PLC Simulator Modbus message processing remote code execution vulnerability

Summary A code execution vulnerability exists in the Modbus message-processing functionality of Schneider Electric EcoStruxure Control Expert PLC Simulator 14.1. A specially crafted network request can lead to remote code execution. An attacker can send a large Modbus request to trigger this...