CVE-2026-92210

NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists...

EUVD-2026-107399

NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2026-92210

The NoMachine nxhtd service is vulnerable to a Server-Side Request Forgery (SSRF) and information disclosure vulnerability. The flaw resides in the web service , which listens on UDP port 4443 by default, due to a lack of proper URI validation before accessing resources. A remote attacker can exp...

Siemens SIPROTEC Inadequate Encryption Strength (CVE-2024-38867)

The affected devices are supporting weak ciphers on several ports 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS. This could allow an unauthorized attacker in a man-in-the-middle position to decrypt any data passed over to and from those ports. This plugin only...

EUVD-2021-20397

Malware in sbrugna...

SIPROTEC relay protection devices Man-in-the-Middle

The vulnerability of SIPROTEC relay protection devices is related to insufficiently secure data encryption. Exploiting this vulnerability allows a malicious actor, operating remotely, to carry out “man-in-the-middle” attacks using specially crafted packets sent to port 4443/tcp...

Siemens SIPROTEC 5 encryption issue vulnerability

SIPROTEC 5 devices offer a range of integrated protection, control, measurement and automation functions for substations and other applications. A weak cryptography vulnerability exists in Siemens SIPROTEC 5 devices due to affected devices supporting weak cryptography on multiple ports 443/tcp fo...

Siemens SIPROTEC 5 relays Buffer Copy Without Checking Size of Input (CVE-2021-33720)

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

SIPROTEC relay protection devices Code Execution

The vulnerability of SIPROTEC relay protection devices arises from an overflow in the buffer on the socket layer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted packets sent to port 4443/tcp...

Siemens SIPROTEC 5 relays buffer overflow vulnerability (CNVD-2021-71445)

Siemens SIPROTEC 5 is a multifunction relay from Siemens, Germany. A buffer overflow vulnerability exists in the Siemens SIPROTEC 5 relays, which can be exploited by an attacker to send a constructed packet to port 4443/TCP, resulting in a denial of service condition...

Siemens SIPROTEC 5 relays buffer overflow vulnerability

Siemens SIPROTEC 5 is a multifunction relay from Siemens, Germany. A buffer overflow vulnerability exists in Siemens SIPROTEC 5 relays. An attacker can exploit the vulnerability by sending a constructed packet to port 4443/TCP, resulting in a denial of service condition or remote code execution...

CVE-2021-33719

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

CVE-2021-33720

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

CVE-2021-33720

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

CVE-2021-33719

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

Remote code execution

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

CVE-2021-33720

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

PT-2021-20295

Name of the Vulnerable Software and Affected Versions: SIPROTEC 5 relays with CPU variants CP050 versions prior to V8.80 SIPROTEC 5 relays with CPU variants CP100 versions prior to V8.80 SIPROTEC 5 relays with CPU variants CP300 versions prior to V8.80 Description: A Denial-of-Service condition c...

PT-2021-4201

Name of the Vulnerable Software and Affected Versions SIPROTEC 5 relays with CPU variants CP050 versions prior to V8.80 SIPROTEC 5 relays with CPU variants CP100 versions prior to V8.80 SIPROTEC 5 relays with CPU variants CP200 versions prior to V8.80 SIPROTEC 5 relays with CPU variants CP300...

CVE-2021-33720: Buffer Copy without Checking Size of Input

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...