WAGO PFC 200 Operating System Command Injection Vulnerability

The WAGO PFC 200 is a programmable logic controller PLC from the German company WAGO. An operating system command injection vulnerability exists in the cloud connectivity feature of the WAGO PFC 200 using firmware versions 03.02.0214, 03.01.0713, and 03.00.3912. The vulnerability stems from a...

The vulnerability in the vManage web interface of Cisco SD-WAN’s programmatically defined network allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability in the vManage web interface of Cisco’s programmable network architecture involves a lack of protection for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...

Multiple Siemens Products Resource Consumption Vulnerability

Siemens SIMATIC S7-300 CPUs etc. are products of Siemens, Germany.SIMATIC S7-300 CPUs is a CPU Central Processing Unit module.Siemens SIMATIC S7-1200 is a PLC Programmable Logic Controller of the S7-1200 series. Siemens SIMATIC S7-400 is a programmable logic controller for manufacturing and proce...

The vulnerability of the user interface of the programmatically defined Cisco SD-WAN network allows a hacker to execute arbitrary commands with user privileges from the vmanage system within the vulnerable system.

The vulnerability of the programmable user interface in Cisco SD-WAN networks is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with privileges as the vmanage user on the vulnerable system...

SIEMENS SCALANCE X witches series authentication bypass vulnerability

SCALANCE X witches are used to connect industrial components such as programmable logic controllers PLCs or human machine interfaces HMIs. An authentication bypass vulnerability exists in the SIEMENS SCALANCE X witches family. An attacker could exploit this vulnerability to obtain sensitive...

Buffer Overflow Vulnerability in WECON PLC Editor

WECON PLC Editor is a programming software for Programmable Logic Controllers PLC from WECON Technologies, China. A buffer overflow vulnerability exists in WECON PLC Editor, which can be exploited by an attacker to cause a denial of service or code execution with the privileges of the application...

Denial of service vulnerability in schneider M580 (CNVD-2020-04562)

Schneider Electric SA is a global electrical company headquartered in France and a global specialist in energy efficiency management and automation. A denial of service vulnerability exists in the schneider M580, which can be exploited by an attacker to cause the loss of the PLC's internal...

Denial of Service Vulnerability in Omron PLC at Omron Automation (China) Co.

The OMRON PLC is a full-featured compact PLC that provides high value-added machine control for industry-leading conveyor decentralized control and more. A denial of service vulnerability exists in the Omron PLC of Omron China Ltd. that can be exploited by attackers to cause a denial of service...

CVE-2019-18236

Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.520190129 processes project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application...

WAGO PFC 200 'I/O-Check' Buffer Overflow Vulnerability

The WAGO PFC 200 and WAGO PFC 100 are both programmable logic controllers PLCs from WAGO Germany. A buffer overflow vulnerability exists in the 'I/O-Check' function in the WAGO PFC 200 and PFC100. The vulnerability originates when a networked system or product performs an operation on memory...

WAGO PFC200 Buffer Overflow Vulnerability (CNVD-2019-46395)

The WAGO PFC200 is a programmable logic controller PLC from WAGO Germany. A buffer overflow vulnerability exists in the WAGO PFC200. The vulnerability originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in incorrect...

WAGO PFC 200 Buffer Overflow Vulnerability

The WAGO PFC 200 is a programmable logic controller PLC from the German company WAGO. A buffer overflow vulnerability exists in the I/O-Check function in the WAGO PFC 200. The vulnerability originates when a networked system or product performs an operation on memory without properly validating...

CVE-2019-18832

Barco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials Management. The ClickShare Button implements encryption at rest which uses a one-time programmable OTP AES encryption key. This key is shared across all ClickShare Buttons of model R9861500D01...

Denial of Service Vulnerability in NA400 of Nanda Aotuo Technology Jiangsu Co.

The NA400 is a programmable controller. A denial of service vulnerability exists in the NA400 of Nanda Aotuo Technology Jiangsu Co. An attacker can cause a denial of service to the device by continuously sending specific packets...

CVE-2019-18269

Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability...

WAGO PFC200 and PFC100 Denial of Service Vulnerabilities

The WAGO PFC200 and WAGO PFC100 are both programmable logic controllers PLCs from WAGO Germany. A denial of service vulnerability exists in the I/O-Check function in the WAGO PFC200 using firmware version 03.01.0713 and the WAGO PFC100 using firmware version 03.00.3912, which can be exploited by ...

PT-2019-15306 · Omron · Omron Plc Cj Series

Name of the Vulnerable Software and Affected Versions: Omron CS series PLCs affected versions not specified Omron CJ series PLCs affected versions not specified Description: The issue concerns an unrestricted externally accessible lock vulnerability. Recommendations: For Omron CS series PLCs, at...

Access Control Error Vulnerability in Omron PLC CJ and CS Series

Omron PLC CJ and CS series are PLCs from Omron. A security vulnerability exists in the Omron PLC CJ and CS Series that can be exploited by an attacker to access unrestricted locks...

The vulnerability of the REST API interface of the Cisco Prime Infrastructure monitoring and network equipment management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the REST API interface of the Cisco Prime Infrastructure monitoring and network equipment management system, as well as the Cisco Evolved Programmable Network Manager EPNM software for managing network services, is related to insufficient validation of input data. Exploiting...

CVE-2019-15958

A vulnerability in the REST API of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network Manager EPNM could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the underlying operating system. The vulnerability is due to insufficient input...