Lucene search
+L

525 matches found

Vulnrichment
Vulnrichment
added 2023/08/08 2:24 p.m.13 views

CVE-2023-2423 Rockwell Automation Armor PowerFlex Vulnerable to Denial-Of-Service

A vulnerability was discovered in the Rockwell Automation Armor PowerFlex device when the product sends communications to the local event log. Threat actors could exploit this vulnerability by sending an influx of network commands, causing the product to generate an influx of event log traffic at...

8.6CVSS6.7AI score0.00637EPSS
SaveExploits0References1
CVE
CVE
added 2023/08/08 2:24 p.m.64 views

CVE-2023-2423

Rockwell Automation Armor PowerFlex carries CVE-2023-2423. The issue arises when the device sends communications to the local event log, enabling an attacker to flood event log traffic with a high-rate influx of network commands, potentially stopping normal operations and forcing a self-reset (Do...

8.6CVSS7.9AI score0.00637EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/08 12:0 a.m.12 views

PT-2023-19486 · Rockwell Automation · Rockwell Automation Armor Powerflex

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Armor PowerFlex affected versions not specified Description: A vulnerability was discovered in the Rockwell Automation Armor PowerFlex device when the product sends communications to the local event log. Threat actors coul...

8.6CVSS7.3AI score0.00637EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/08/08 12:0 a.m.9 views

Rockwell Automation Armor PowerFlex Security Breach

Rockwell Automation Armor PowerFlex is a line of inverters from Rockwell Automation, Inc. A security vulnerability exists in the Rockwell Automation Armor PowerFlex that stems from a vulnerability that allows an attacker to send network commands to cause the product to generate a large amount of...

8.6CVSS6.8AI score0.00637EPSS
SaveExploits0References3
ICS
ICS
added 2022/07/28 12:0 a.m.82 views

Rockwell Products Impacted by Chromium Type Confusion

1. EXECUTIVE SUMMARY CVSS v3 4.0 ATTENTION: Low attack complexity/public exploits are available Vendor: Rockwell Automation Equipment: FactoryTalk Software, Enhanced HIM for PowerFlex, Connected Components Workbench Vulnerability: Type Confusion 2. RISK EVALUATION Successful exploitation of this...

8.8CVSS8.7AI score0.24237EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.19 views

Rockwell (CVE-2018-19282) (deprecated)

This plugin has been deprecated as PowerFlex AC Drives are not currently supported. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2022/05/19...

9.3AI score0.05645EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/07/14 12:0 a.m.23 views

Dell powerflex presentation server data forgery issue vulnerability

DELL Dell EMC PowerFlex is an application from Dell of America DELL, Inc. Dell powerflex presentation server data forgery issue vulnerability, which originates from the product's websocket in the Presentation Server/WebUI does not do user identity An attacker could hijack the Websocket to trick...

6.5CVSS2.7AI score0.00336EPSS
SaveExploits0References1
NVD
NVD
added 2021/07/12 4:15 p.m.15 views

CVE-2021-21588

Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server and perform which may lead ...

6.5CVSS0.00336EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/12 4:15 p.m.5 views

CVE-2021-21588

Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server and perform which may lead ...

4.3CVSS5.8AI score0.00336EPSS
SaveExploits0References1
Prion
Prion
added 2021/07/12 4:15 p.m.16 views

Cross site scripting

Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server and perform which may lead ...

4.3CVSS4.6AI score0.00336EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/12 3:40 p.m.16 views

CVE-2021-21588

Dell EMC PowerFlex, v3.5.x contain a Cross-Site WebSocket Hijacking Vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could potentially exploit this vulnerability by tricking the user into performing unwanted actions on the Presentation Server and perform which may lead ...

6.5CVSS6.6AI score0.00336EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/12 3:40 p.m.48 views

CVE-2021-21588

CVE-2021-21588 affects Dell EMC PowerFlex, specifically the Presentation Server/WebUI in v3.5.x. The issue is a Cross-Site WebSocket Hijacking vulnerability where an unauthenticated attacker could trick a logged-in user into performing unintended actions on the Presentation Server, potentially le...

6.5CVSS4.5AI score0.00336EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/07/12 12:0 a.m.8 views

Dell EMC PowerFlex数据伪造问题漏洞

DELL Dell EMC PowerFlex is an application from Dell of America DELL, Inc. Dell powerflex presentation server data forgery issue vulnerability, which originates from the product's websocket in the Presentation Server/WebUI does not do user identity An attacker could hijack the Websocket to trick...

6.5CVSS5.6AI score0.00336EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/11/08 12:0 a.m.28 views

Rockwellautomation Powerflex Uncontrolled Resource Consumption

Rockwell Automation PowerFlex 525 AC Drives 5.001 and earlier allow remote attackers to cause a denial of service by crashing the Common Industrial Protocol CIP network stack. The vulnerability allows the attacker to crash the CIP in a way that it does not accept new connections, but keeps the...

10CVSS4.5AI score0.05645EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2019/08/20 12:0 a.m.13 views

Rockwell Automation 25B-B024N104 PowerFlex 525 AC Drive

Binary data 764953.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/08/20 12:0 a.m.9 views

Rockwell Automation 25B-E4P2N104 PowerFlex 525 AC Drive

Binary data 764988.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/08/20 12:0 a.m.10 views

Rockwell Automation 25B-A2P5N104 PowerFlex 525 AC Drive

Binary data 764945.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/08/20 12:0 a.m.8 views

Rockwell Automation 25B-D024N104 PowerFlex 525 AC Drive

Binary data 764966.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/08/20 12:0 a.m.7 views

Rockwell Automation 25B-A8P0N104 PowerFlex 525 AC Drive

Binary data 764949.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/08/20 12:0 a.m.13 views

Rockwell Automation 25B-V4P8N104 PowerFlex 525 AC Drive

Binary data 764992.prm...

7.3AI score
SaveExploits0
Rows per page
Query Builder