503 matches found
Schneider TM218LDAE24DRHN IPv4 protocol stack suffers from a denial of service vulnerability
The TM218LDAE24DRHN is a programmable logic controller PLC product under the Modicon banner of Schneider Electric, a French company. A denial of service vulnerability exists in the Schneider TM218LDAE24DRHN IPv4 protocol stack, which can be exploited by an attacker to cause the device to go down...
Denial of Service Vulnerability in ARP Protocol in MITSUBISHI Electric FX5U-32MT/ES
The Mitsubishi Electric FX5U-32MT/ES is a programmable logic controller PLC product of the MELSEC FX series. A denial of service vulnerability exists in the ARP protocol of the MITSUBISHI Electric FX5U-32MT/ES, which can be exploited by attackers to cause the device to fail to function properly...
Scalance X Products Hard-Coded Encryption Key Vulnerability
SCALANCE X is a switch for connecting industrial components such as programmable logic controllers plc or human machine interfaces HMIs. The Scalance X Products hard-coded encryption key vulnerability can be exploited by an attacker to handle man-in-the-middle scenarios and decrypt previously...
Phoenix Contact PLCnext Control Devices Security Breach
Phoenix Contact PLCnext Control Devices is a programmable logic controller for industrial environments from Phoenix Contact, Germany. A security vulnerability exists in Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS, which can be exploited by an attacker to open a reverse shel...
Misubishi Electric MELSEC iQ-F series Security Vulnerability
The Misubishi Electric MELSEC iQ-F series is a programmable logic controller from Misubishi Electric Japan. A security vulnerability exists in the MELSEC iQ-F series, which can be exploited by an attacker to cause a denial of service, due to improper checking or handling of an exception by the...
CVE-2020-6111
An exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley MicroLogix 1100 Programmable Logic Controller Systems Series B FRN 16.000, Series B FRN 15.002, Series B FRN 15.000, Series B FRN 14.000, Series B FRN 13.000, Series B FRN 12.000, Series B FRN 11.000...
Schneider Electric Unity Pro 安全漏洞
Schneider Electric EcoStruxure Control Expert is the universal programming, commissioning and operating software for the Modicon M340, M580, M580S, Premium, Momentum and Quantum series. A command execution vulnerability exists in Schneider Electric EcoStruxure Control Expert. The vulnerability...
The vulnerability of the programming tool WideField3 for the programmable logical controller FA-M3 allows a intruder to trigger a service failure.
The vulnerability of the programming tool WideField3 for the programmable logical controller FA-M3 lies in the writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an intruder to cause a malfunction in the system’s operation...
Allen-Bradley MicroLogix 1100 programmable logic controller systems IPv4 denial-of-service vulnerability
Summary An exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley MicroLogix 1100 Programmable Logic Controller Systems Series B FRN 16.000, Series B FRN 15.002, Series B FRN 15.000, Series B FRN 14.000, Series B FRN 13.000, Series B FRN 12.000, Series B FRN...
CVE-2020-16234
In PLC WinProladder Version 3.28 and prior, a stack-based buffer overflow vulnerability can be exploited when a valid user opens a specially crafted file, which may allow an attacker to remotely execute arbitrary code...
Information leakage vulnerability in CSC-850 of Beijing Sifang Relay Automation Co., Ltd (CNVD-2020-58374)
The CSC850 PLC is a compact controller for small and medium-sized discrete automation systems and stand-alone automation systems from Beijing Sifang Relay Automation Co. An information disclosure vulnerability exists in the CSC-850 of Beijing Sifang Relay Automation Company Limited, which can be...
Denial of Service Vulnerability in CSC-830 of Beijing Sifang Relay Automation Co.
CSC830 PLC is a compact controller for small and medium-sized discrete automation systems and stand-alone automation systems from Beijing Sifang Relay Automation Co. A denial of service vulnerability exists in the Beijing Sifang Relay Automation Company Limited CSC-830, which can be exploited by ...
Information leakage vulnerability in CSC-830 of Beijing Sifang Relay Automation Co.
CSC830 PLC is a compact controller for small and medium-sized discrete automation systems and stand-alone automation systems from Beijing Sifang Relay Automation Co. The CSC-830 of Beijing Sifang Relay Automation Co., Ltd. suffers from an information leakage vulnerability that can be exploited by...
Denial of Service Vulnerability in Omron Small PLC Series CP1L (CNVD-2020-58494)
CP1L is Omron's compact PLC series, an all-in-one PLC with built-in pulse output, analog input/output, and serial communication functions. A denial of service vulnerability exists in the Omron Compact PLC Series CP1L, which can be exploited by an attacker to erase logic files running inside the...
isf
This is an offensive tool for ICS exploitation. It is a Python-based framework for exploiting Industrial Control Systems ICS, similar to Metasploit. The framework, known as ICSSploit, is a fork of the routersploit project and is designed for ICS exploitation. It includes various modules for...
Improper Password Protection During Authentication Vulnerability in Multiple Siemens Products
The Siemens SIMATIC S7-300 CPU is a modular general-purpose controller for the manufacturing industry from Siemens.Products in the Siemens SIMATIC S7-400 CPU family have been designed for process control in industrial environments. A security vulnerability exists in several Siemens products. An...
Weak password vulnerability in AM600-PS2 of Suzhou Huichuan Technology Co.
The AM600-PS2 is a medium-sized programmable logic controller PLC designed with a modular structure. A weak password vulnerability exists in the AM600-PS2 of Suzhou Huichuan Technology Company Limited, which can be exploited by an attacker to log into the PLC's operating system...
NSA Urgently Warns on Industrial Cyberattacks, Triconex Critical Bug
The U.S. National Security Agency NSA and the Cybersecurity and Infrastructure Security Agency CISA have issued an alert warning that adversaries could be targeting critical infrastructure across the U.S. Separately, ICS-CERT issued an advisory on a critical security bug in the Schneider Electric...
Binary Vulnerability in Siemens PLC at Siemens (China) Co.
Siemens is a global technology company that provides solutions for customers in the areas of power generation and transmission and distribution, infrastructure, industrial automation, drives and software with innovations in electrification, automation and digitalization. A binary vulnerability...