175 matches found
Softing uaToolkit Embedded 安全漏洞
Softing UaToolkit Embedded is used to support the development of embedded Opc Ua applications via client/server and publisher/subscriber communication by Softing Germany. A security vulnerability exists in Softing uaToolkit Embedded versions 1.30 through 1.41.1, which stems from a mishandling of...
Festo Firmware
SUMMARY Incomplete Festo product documentation of remote accessible functions and their required IP ports. Depending on the product a description of the supported features can be found in the product documentation to some extent. Update A, 2022-12-13 Added affected device "Bus module CPX-E-PN,...
Siemens PROFINET Stack Integrated on Interniche Stack Uncontrolled Resource Consumption (CVE-2022-25622)
A vulnerability has been identified in SIMATIC CFU DIQ All versions, SIMATIC CFU PA All versions, SIMATIC S7-1500 CPU family incl. related ET200 CPUs and SIPLUS variants All versions V2.0.0, SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 H V6 C...
Design/Logic Flaw
A vulnerability has been identified in SIMATIC CFU DIQ, SIMATIC CFU PA, SIMATIC ET 200pro IM154-8 PN/DP CPU, SIMATIC ET 200pro IM154-8F PN/DP CPU, SIMATIC ET 200pro IM154-8FX PN/DP CPU, SIMATIC ET 200S IM151-8 PN/DP CPU, SIMATIC ET 200S IM151-8F PN/DP CPU, SIMATIC ET200AL IM157-1 PN, SIMATIC...
pn-ontwerp.nl Improper Access Control vulnerability OBB-2438998
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol PN-DCP for Cisco IOS could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service...
Bentley MicroStation CONNECT Out-of-Bounds Write Vulnerability (CNVD-2022-30766)
Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, U.S.A. An out-of-bounds write vulnerability exists in Bentley MicroStation CONNECT, which could be exploited by an attacker to trigger, via crafted data in a PN image an out-of-bounds...
Siemens S7-400 CPUs Improper Input Validation (CVE-2018-16556)
A vulnerability has been identified in SIMATIC S7-400 incl. F V6 and below All versions, SIMATIC S7-400 PN/DP V7 incl. F All versions, SIMATIC S7-400H V4.5 and below All versions, SIMATIC S7-400H V6 All versions V6.0.9, SIMATIC S7-410 All versions V8.2.1. Specially crafted packets sent to port...
pn-gresik.go.id Cross Site Scripting vulnerability OBB-2300828
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Breaking the NFC chips in tens of millions of smart phones, and a few PoS systems
This second post is a companion to the DEF CON 29 video. Starts at 25:43 here. About a year ago I did some research into adding new capabilities to Samsung’s NFC chips in their smartphones, by bypassing their signature protection and applying code patches. This allowed me to add custom NFC tag...
Citrix Receiver Application Icons are Unavailable from Systray
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. After installing Citrix Receiver 3.0 and configuring it for PN Agent operation, users cannot configu...
pn-gorontalo.go.id Improper Access Control vulnerability OBB-1234438
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Race condition
A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7, SIMATIC S7-400 CPU 414F-3 PN/DP V7, SIMATIC S7-400 CPU 416-3 PN/DP V7, SIMATIC S7-400 CPU 416F-3 PN/DP V7, Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFIN...
Siemens SIMATIC ET 200eco PN 8 inputs /double assignment Digital I/O module
Binary data 764633.prm...
Siemens SIMATIC ET 200eco PN 16 inputs /double assignment Digital I/O module
Binary data 764635.prm...
Siemens SIMATIC ET 200eco PN 8 outputs /double assignment Digital I/O module
Binary data 764638.prm...
Siemens SIMATIC ET 200eco PN 8 outputs /double assignment Digital I/O module
Binary data 764637.prm...
Siemens SIMATIC ET 200eco PN 4 inputs voltage/current I/O module
Binary data 764644.prm...