CVE-2019-13946

Profinet-IO PNIO stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable...

CVE-2024-48989

A vulnerability in the PROFINET stack implementation of the IndraDrive all versions of Bosch Rexroth allows an attacker to cause a denial of service, rendering the device unresponsive by sending arbitrary UDP messages...

CVE-2024-48989

A vulnerability in the PROFINET stack implementation of the IndraDrive all versions of Bosch Rexroth allows an attacker to cause a denial of service, rendering the device unresponsive by sending arbitrary UDP messages...

CVE-2024-48989

A vulnerability in the PROFINET stack implementation of the IndraDrive all versions of Bosch Rexroth allows an attacker to cause a denial of service, rendering the device unresponsive by sending arbitrary UDP messages...

CVE-2024-48989

The CVE-2024-48989 affects Bosch Rexroth IndraDrive PROFINET stack (IndraDrive devices, all versions) with a vulnerability in the PROFINET stack that enables an attacker to cause a denial-of-service by sending arbitrary UDP messages, rendering the device unresponsive. Practical impact and exploit...

CVE-2024-48989

A vulnerability in the PROFINET stack implementation of the IndraDrive all versions of Bosch Rexroth allows an attacker to cause a denial of service, rendering the device unresponsive by sending arbitrary UDP messages...

Bosch Rexroth IndraDrive 安全漏洞

Bosch Rexroth IndraDrive is a servo drive system from Bosch Rexroth that supports multiple protocols. A security vulnerability exists in Bosch Rexroth IndraDrive that originates from a flaw in the PROFINET stack implementation, which can be exploited by an attacker to send an arbitrary UDP messag...

PT-2024-33317 · Bosch Rexroth · Bosch Rexroth Indradrive

Name of the Vulnerable Software and Affected Versions: Bosch Rexroth IndraDrive all versions Description: A vulnerability in the PROFINET stack implementation allows an attacker to cause a denial of service by sending arbitrary UDP messages, rendering the device unresponsive. This issue could...

CVE-2024-6157

An attacker who successfully exploited these vulnerabilities could cause the robot to stop. A vulnerability exists in the PROFINET stack included in the RobotWare versions listed below. This vulnerability arises under specific condition when specially crafted message is processed by the system...

CVE-2024-6157

The CVE-2024-6157 entry concerns ABB IRC5 RobotWare prior to 6.15.06 (except 6.10.10 and 6.13.07) where a vulnerability in the PROFINET stack can be triggered by processing a specially crafted message, potentially causing the robot to stop. Affected products are RobotWare 6.x, with a reported imp...

CVE-2024-6157

An attacker who successfully exploited these vulnerabilities could cause the robot to stop. A vulnerability exists in the PROFINET stack included in the RobotWare versions listed below. This vulnerability arises under specific condition when specially crafted message is processed by the system...

CVE-2024-6157

An attacker who successfully exploited these vulnerabilities could cause the robot to stop. A vulnerability exists in the PROFINET stack included in the RobotWare versions listed below. This vulnerability arises under specific condition when specially crafted message is processed by the system...

Siemens SINEC Traffic Analyzer Session Expires Insufficiently Vulnerable

SINEC Traffic Analyzer is an on-premise application that monitors PNIO PROFINET IO communication between controllers and IO devices. The software detects PROFINET communication problems and reports them to the user via Web-UI. Siemens SINEC Traffic Analyzer suffers from an insufficient session...

Siemens SINEC Traffic Analyzer Sensitive Information Plaintext Transfer Vulnerability

SINEC Traffic Analyzer is an on-premise application that monitors PNIO PROFINET IO communication between controllers and IO devices. The software detects PROFINET communication problems and reports them to the user via Web-UI. Siemens SINEC Traffic Analyzer suffers from a sensitive information...

Siemens SINEC Traffic Analyzer Cross-Site Request Forgery Vulnerability

SINEC Traffic Analyzer is an on-premise application that monitors PNIO PROFINET IO communication between controllers and IO devices. The software detects PROFINET communication problems and reports them to the user via Web-UI. A cross-site request forgery vulnerability exists in Siemens SINEC...

Siemens SINEC Traffic Analyzer Input Validation Error Vulnerability

SINEC Traffic Analyzer is an on-premise application that monitors PNIO PROFINET IO communication between controllers and IO devices. The software detects PROFINET communication problems and reports them to the user via Web-UI. An input validation error vulnerability exists in Siemens SINEC Traffi...

Hazardous Method or Function Vulnerability Exposed by Siemens SINEC Traffic Analyzer

SINEC Traffic Analyzer is an on-premise application that monitors PNIO PROFINET IO communication between controllers and IO devices. The software detects PROFINET communication problems and reports them to the user via Web-UI. Siemens SINEC Traffic Analyzer has an exposed dangerous method or...

Siemens SINEC Traffic Analyzer 跨站请求伪造漏洞

SINEC Traffic Analyzer is an on-premise application that monitors PNIO PROFINET IO communication between controllers and IO devices. The software detects PROFINET communication problems and reports them to the user via Web-UI. A cross-site request forgery vulnerability exists in Siemens SINEC...

Siemens SINEC Traffic Analyzer 代码问题漏洞

SINEC Traffic Analyzer is an on-premise application that monitors PNIO PROFINET IO communication between controllers and IO devices. The software detects PROFINET communication problems and reports them to the user via Web-UI. Siemens SINEC Traffic Analyzer suffers from an insufficient session...

Discovery and Basic Configuration Protocol Access Control Error Vulnerability

Discovery and Basic Configuration Protocol is a discovery and basic configuration protocol used by engineering tools and controllers to discover devices, identify device information, and configure device settings such as PROFINET device names, IP addresses, and so on in a PROFINET network. An...