CVE-2019-20045

CVE-2020-7800 (RH) concerns Synergy Systems & Solutions HUSKY RTU 6049-E70 firmware versions 5.0 and prior. The Red Hat notes describe an Improper Check for Unusual or Exceptional Conditions (CWE-754) vulnerability where specially crafted TCP packets can cause the device to shut down or reboot an...

CVE-2019-20046

The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and prior. The affected product does not require adequate authentication, which may allow an attacker to read sensitive information or execute arbitrary code. This is a different issue...

CVE-2019-20046

The CVE-2019-20046 entry concerns Synergy Systems & Solutions HUSKY RTU 6049-E70 firmware (versions 5.0 and earlier). The root cause is insufficient authentication, potentially allowing an attacker to read sensitive information or execute arbitrary code. Publicly documented impact is high-priorit...

Memory Corruption Vulnerability in Yonghong FD100 (CNVD-2020-10236)

YHM Taiwan specializes in the highly functional small, medium and micro PLC market segments. A memory corruption vulnerability exists in the Yonghong FD100, which can be exploited by attackers to cause a denial of service...

Buffer Overflow Vulnerability in BeckHoff CX9020

The CX9020 is a PLC generated by BeckHoff with a Webservice for remote configuration of the PLC, through which the user can configure the PLC with a browser. The BeckHoff CX9020 suffers from a buffer overflow vulnerability that can be exploited by an attacker to crash the service or possibly...

Buffer Overflow Vulnerability in WECON PLC Editor

WECON PLC Editor is a programming software for Programmable Logic Controllers PLC from WECON Technologies, China. A buffer overflow vulnerability exists in WECON PLC Editor, which can be exploited by an attacker to cause a denial of service or code execution with the privileges of the application...

Denial of service vulnerability in schneider M580 (CNVD-2020-04563)

Schneider Electric SA is a global electrical company headquartered in France. A denial of service vulnerability exists in the schneider M580, which can be exploited by an attacker to cause the PLC to enter a fatal failure mode after sending a well-constructed 0x65 function code data message, whic...

(0Day) WECON PLC Editor PLCDataCeter Port Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of W...

(0Day) WECON PLC Editor PLCDataCeter PortPath Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of W...

4 uses for programmable logic controllers in industrial settings

By Waqas It’s fair to say that programmable logic controllers PLCs are the brains of industrial systems... This is a post from HackRead.com Read the original post: 4 uses for programmable logic controllers in industrial settings...

CVE-2019-18236

Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.520190129 processes project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application...

Buffer overflow

Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.520190129 processes project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application...

CVE-2019-18236

CVE-2019-18236 affects WECON PLC Editor (Version 1.3.5_20190129). The vulnerability is a stack-based buffer overflow in the PLC Editor when processing project files (notably WCP data elements such as PortPath/Port), caused by handling of fixed-length buffers. Successful exploitation could allow c...

CVE-2019-18236

Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.520190129 processes project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application...

CVE-2019-19789

3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference...

WECON Technologies PLC Editor Buffer Overflow Vulnerability

WECON Technologies PLC Editor is a programming software for Programmable Logic Controllers PLC from WECON Technologies, China. A buffer overflow vulnerability exists in WECON Technologies PLC Editor. The vulnerability can be exploited to execute code with the privileges of the application via a...

Remote code execution

Beckhoff Embedded Windows PLCs through 3.1.4024.0, and Beckhoff Twincat on Windows Engineering stations, allow an attacker to achieve Remote Code Execution as SYSTEM via the Beckhoff ADS protocol...

Wecon PLC Editor CVE-2019-18236 Multiple Stack Based Buffer Overflow Vulnerabilities

...

WAGO PFC200 Access Control Error Vulnerability (CNVD-2019-46396)

The WAGO PFC200 is a programmable logic controller PLC from WAGO Germany. An access control error vulnerability exists in the WAGO PFC200. An attacker could exploit this vulnerability to cause a denial of service with the help of specially crafted packets to bring the device into an incorrect sta...

Denial of Service Vulnerability in Xinjie XG1-16T4 PLC

Wuxi Xinjie Electric Co., Ltd. is a well-known domestic enterprise focusing on the research, development and application of industrial automation products. A denial of service vulnerability exists in XG1-16T4 PLC. An attacker can exploit the vulnerability by sending an excessively long packet to...