Information leakage vulnerability in CSC-850 of Beijing Sifang Relay Automation Co., Ltd (CNVD-2020-58374)

The CSC850 PLC is a compact controller for small and medium-sized discrete automation systems and stand-alone automation systems from Beijing Sifang Relay Automation Co. An information disclosure vulnerability exists in the CSC-850 of Beijing Sifang Relay Automation Company Limited, which can be...

Denial of Service Vulnerability in CSC-830 of Beijing Sifang Relay Automation Co.

CSC830 PLC is a compact controller for small and medium-sized discrete automation systems and stand-alone automation systems from Beijing Sifang Relay Automation Co. A denial of service vulnerability exists in the Beijing Sifang Relay Automation Company Limited CSC-830, which can be exploited by ...

Information leakage vulnerability in CSC-830 of Beijing Sifang Relay Automation Co.

CSC830 PLC is a compact controller for small and medium-sized discrete automation systems and stand-alone automation systems from Beijing Sifang Relay Automation Co. The CSC-830 of Beijing Sifang Relay Automation Co., Ltd. suffers from an information leakage vulnerability that can be exploited by...

The vulnerabilities of the MAX 10 FPGA programmable logic circuit, related to configuration errors in its design, allow attackers to gain unauthorized access to protected information.

The vulnerability of the MAX 10 FPGA programmable logic circuit lies in configuration errors in its design. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the microprogramming software of the Intel FPGA Programmable Acceleration Card N3000, related to resource release errors, allows a intruder to trigger a service failure.

The vulnerability of the microprogramming software of the Intel FPGA Programmable Acceleration Card N3000 is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the PCIe function in the microprogramming software of Intel FPGA Programmable Acceleration Card N3000 allows a hacker to enhance their privileges.

The vulnerability of the PCIe function in the microprogramming software of Intel FPGA Programmable Acceleration Card N3000 is related to insecure management of privileges. Exploiting this vulnerability could allow attackers to enhance their privileges...

Denial of Service Vulnerability in Omron Small PLC Series CP1L (CNVD-2020-58493)

CP1L is Omron's compact PLC series, an all-in-one PLC with built-in pulse output, analog input/output, and serial communication functions. A denial of service vulnerability exists in Omron Small PLC Series CP1L, which can be exploited by attackers to cause a device connection to be interrupted...

Denial of Service Vulnerability in Omron Small PLC Series CP1L (CNVD-2020-58494)

CP1L is Omron's compact PLC series, an all-in-one PLC with built-in pulse output, analog input/output, and serial communication functions. A denial of service vulnerability exists in the Omron Compact PLC Series CP1L, which can be exploited by an attacker to erase logic files running inside the...

isf

This is an offensive tool for ICS exploitation. It is a Python-based framework for exploiting Industrial Control Systems ICS, similar to Metasploit. The framework, known as ICSSploit, is a fork of the routersploit project and is designed for ICS exploitation. It includes various modules for...

Improper Password Protection During Authentication Vulnerability in Multiple Siemens Products

The Siemens SIMATIC S7-300 CPU is a modular general-purpose controller for the manufacturing industry from Siemens.Products in the Siemens SIMATIC S7-400 CPU family have been designed for process control in industrial environments. A security vulnerability exists in several Siemens products. An...

Information Disclosure Vulnerability in KPS2204 of Beijing Eastland Technology Co.

The KPS2204 is a programmable protocol converter developed specifically for serial device networking applications. Ltd. KPS2204 suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in KPS2204 at Beijing Eastland Technology Co.

The KPS2204 is a programmable protocol converter developed specifically for serial device networking applications. A command execution vulnerability exists in the KPS2204 of Beijing Eastland Technology Co. Ltd. that can be exploited by an attacker to execute arbitrary commands...

Intel® PAC with Arria® 10 GX FPGA Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00375.html...

Weak password vulnerability in AM600-PS2 of Suzhou Huichuan Technology Co.

The AM600-PS2 is a medium-sized programmable logic controller PLC designed with a modular structure. A weak password vulnerability exists in the AM600-PS2 of Suzhou Huichuan Technology Company Limited, which can be exploited by an attacker to log into the PLC's operating system...

20 Years of Edge Computing

How long will you wait for something? That depends on what you're waiting for, of course. But in your daily interactions, think about how many "things" you interact with where you expect the response to be instantaneous - tapping on mobile apps, logging in and transacting with a retailer or a ban...

NSA Urgently Warns on Industrial Cyberattacks, Triconex Critical Bug

The U.S. National Security Agency NSA and the Cybersecurity and Infrastructure Security Agency CISA have issued an alert warning that adversaries could be targeting critical infrastructure across the U.S. Separately, ICS-CERT issued an advisory on a critical security bug in the Schneider Electric...

Binary Vulnerability in Siemens PLC at Siemens (China) Co.

Siemens is a global technology company that provides solutions for customers in the areas of power generation and transmission and distribution, infrastructure, industrial automation, drives and software with innovations in electrification, automation and digitalization. A binary vulnerability...

CVE-2020-10628

ControlEdge PLC R130.2, R140, R150, and R151 and RTU R101, R110, R140, R150, and R151 exposes unencrypted passwords on the network...

CVE-2020-10624

ControlEdge PLC R130.2, R140, R150, and R151 and RTU R101, R110, R140, R150, and R151 exposes a session token on the network...

Honeywell ControlEdge PLC and ControlEdge RTU Information Disclosure Vulnerability

Honeywell ControlEdge PLC and ControlEdge RTU are both products of Honeywell, Inc. The ControlEdge PLC is a programmable logic controller PLC.The ControlEdge RTU is a remote terminal unit RTU. An information disclosure vulnerability exists in the Honeywell ControlEdge PLC and RTU, which can be...