Siemens SIPROTEC Inadequate Encryption Strength (CVE-2024-38867)

The affected devices are supporting weak ciphers on several ports 443/tcp for web, 4443/tcp for DIGSI 5 and configurable port for syslog over TLS. This could allow an unauthorized attacker in a man-in-the-middle position to decrypt any data passed over to and from those ports. This plugin only...

EUVD-2021-20397

Malware in sbrugna...

The vulnerability of SIPROTEC relay protection devices, related to insufficiently secure data encryption, allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of SIPROTEC relay protection devices is related to insufficiently secure data encryption. Exploiting this vulnerability allows a malicious actor, operating remotely, to carry out “man-in-the-middle” attacks using specially crafted packets sent to port 4443/tcp...

Siemens SIPROTEC 5 加密问题漏洞

SIPROTEC 5 devices offer a range of integrated protection, control, measurement and automation functions for substations and other applications. A weak cryptography vulnerability exists in Siemens SIPROTEC 5 devices due to affected devices supporting weak cryptography on multiple ports 443/tcp fo...

Siemens SIPROTEC 5 relays Buffer Copy Without Checking Size of Input (CVE-2021-33720)

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

The vulnerabilities of SIPROTEC relay protection devices allow a intruder to execute arbitrary code.

The vulnerability of SIPROTEC relay protection devices arises from an overflow in the buffer on the socket layer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted packets sent to port 4443/tcp...

Siemens SIPROTEC 5 relays buffer overflow vulnerability

Siemens SIPROTEC 5 is a multifunction relay from Siemens, Germany. A buffer overflow vulnerability exists in Siemens SIPROTEC 5 relays. An attacker can exploit the vulnerability by sending a constructed packet to port 4443/TCP, resulting in a denial of service condition or remote code execution...

Siemens SIPROTEC 5 relays buffer overflow vulnerability (CNVD-2021-71445)

Siemens SIPROTEC 5 is a multifunction relay from Siemens, Germany. A buffer overflow vulnerability exists in the Siemens SIPROTEC 5 relays, which can be exploited by an attacker to send a constructed packet to port 4443/TCP, resulting in a denial of service condition...

CVE-2021-33720

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

CVE-2021-33719

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

Remote code execution

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

CVE-2021-33720

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

CVE-2021-33720

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

PT-2021-20295

Name of the Vulnerable Software and Affected Versions: SIPROTEC 5 relays with CPU variants CP050 versions prior to V8.80 SIPROTEC 5 relays with CPU variants CP100 versions prior to V8.80 SIPROTEC 5 relays with CPU variants CP300 versions prior to V8.80 Description: A Denial-of-Service condition c...

CVE-2021-33720: Buffer Copy without Checking Size of Input

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

CVE-2021-33719: Buffer Copy without Checking Size of Input

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 All versions V8.80, SIPROTEC 5 relays with CPU variants CP100 All versions V8.80, SIPROTEC 5 relays with CPU variants CP300 All versions V8.80. Specially crafted packets sent to port 4443/tcp could cause a...

Buffer overflow

A Buffer Overflow in Network::AuthenticationClient::VerifySignature in /bin/astro in Neato Botvac Connected 2.2.0 allows a remote attacker to execute arbitrary code with root privileges via a crafted POST request to a vendors/neato/robots/robotserial/messages Neato cloud URI on the...

arcserve.py.txt

!/usr/bin/python Remote exploit for buffer overflow vulnerability in CA BrightStor Arcserve tapeeng.exe service. Tested on windows 2000 SP4. Binds shell to TCP port 4443 Winny M Thomas ;- Author shall bear no responsibility for any screw ups caused by using this code from impacket.dcerpc import...

CA BrightStor ARCserve (tapeeng.exe) Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/python Remote exploit for buffer overflow vulnerability in CA BrightStor Arcserve tapeeng.exe service. Tested on windows 2000 SP4. Binds shell to TCP port 4443 Winny M Thomas ;- Author shall bear no responsibility for any screw ups caused by using this...

CA BrightStor ARCserve - tapeeng.exe Remote Buffer Overflow

CA BrightStor ARCserve - tapeeng.exe Remote Buffer Overflow !/usr/bin/python Remote exploit for buffer overflow vulnerability in CA BrightStor Arcserve tapeeng.exe service. Tested on windows 2000 SP4. Binds shell to TCP port 4443 Winny M Thomas ;- Author shall bear no responsibility for any screw...