Lucene search
K

888 matches found

CNVD
CNVD
added 2019/08/19 12:0 a.m.2 views

Denial of Service Vulnerability in MITSUBISHI PLCs

MITSUBISHI PLC is a programmable controller product of Mitsubishi Electric Japan. A denial of service vulnerability exists in MITSUBISHI PLC, which can be exploited by an attacker to cause a denial of service...

6.7AI score
Exploits0
CNVD
CNVD
added 2019/08/19 12:0 a.m.1 views

MITSUBISHI PLC suffers from denial of service vulnerability (CNVD-2019-30336)

MITSUBISHI PLC is a programmable controller product of Mitsubishi Electric Japan. A denial of service vulnerability exists in MITSUBISHI PLC, which can be exploited by an attacker to cause a denial of service...

6.7AI score
Exploits0
CNVD
CNVD
added 2019/08/19 12:0 a.m.1 views

MITSUBISHI PLC suffers from denial of service vulnerability (CNVD-2019-30335)

MITSUBISHI PLC is a programmable controller product of Mitsubishi Electric Japan. A denial of service vulnerability exists in MITSUBISHI PLC, which can be exploited by an attacker to cause a denial of service...

6.7AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:0 a.m.1 views

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and network device management system, as well as the Cisco Evolved Programmable Network (EPN) Manager software, relates to errors in handling HTTP requests. This vulnerability allows an attacker to gain access to protected information.

The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network EPN Manager software relates to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to gain access to protected...

6.5CVSS5.5AI score0.13856EPSS
Exploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:0 a.m.2 views

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and network device management system, as well as the Cisco Evolved Programmable Network (EPN) Manager software, relates to errors in handling HTTP requests. This vulnerability allows an attacker to gain access to protected information.

The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network EPN Manager software relates to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to gain access to protected...

6.5CVSS5.5AI score0.13856EPSS
Exploits1References4Affected Software2
Check Point Advisories
Check Point Advisories
added 2019/06/20 12:0 a.m.5 views

Cisco Multiple Products Remote Code Execution (CVE-2019-1821)

A remote code execution vulnerability exists in the web based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager. A remote unauthenticated attacker could exploit this vulnerability to execute code with root level privileges on the target system...

10CVSS3.7AI score0.98092EPSS
Exploits12
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.3 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to access control errors, allows a intruder to execute arbitrary code.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to access control errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by modifying the controller’s configuration using the Modbus protocol...

10CVSS6AI score0.08161EPSS
Exploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.2 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to unprocessed exceptions, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to unprocessed exceptions. Exploiting this vulnerability could allow a malicious actor to cause malfunctions during the recording of certain application variables using the Modbus protocol in the controller...

7.5CVSS5.5AI score0.02236EPSS
Exploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.2 views

The vulnerability of the microprogrammed logic controller Modicon’s software, related to insufficient checking of exceptional states, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to insufficient testing of exceptional states. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause malfunctions by sending specially crafted Modbus packets to the...

7.5CVSS5.5AI score0.01129EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.2 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to its dependence on unreliable input data during security decision-making, allows a intruder to provide incorrect information.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to its dependence on unreliable input data during security decision-making. Exploiting this vulnerability could allow a malicious actor to provide incorrect information displayed in the Unity Pro software...

5.3CVSS7.8AI score0.01509EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.1 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to unprocessed exceptions, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed logic controller Modicon is related to unprocessed exceptions. Exploiting this vulnerability could allow a malicious actor to cause malfunctions by sending inappropriate debugging parameters to the controller using the Modbus protocol...

7.5CVSS5.5AI score0.02304EPSS
Exploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.2 views

The vulnerability of microprogrammed software in Modicon, ATV IMC, and PacDrive programmable logic controllers lies in the lack of authentication for a critical function, allowing an intruder to alter the device’s configuration.

The vulnerability of microprogrammed software in Modicon, ATV IMC, and PacDrive programmable logic controllers is related to the absence of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to remotely alter the device’s configuration IP address,...

8.2CVSS7.1AI score0.0124EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.2 views

The vulnerability of the microprogrammed programmable logic controller Modicon, related to the use of insufficiently random values, allows a intruder to intercept TCP connections.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to the use of insufficiently random values. Exploiting this vulnerability could allow a malicious actor to intercept TCP connections remotely...

7.5CVSS5.4AI score0.0193EPSS
Exploits0References3Affected Software1
Talos
Talos
added 2019/06/10 12:0 a.m.276 views

Schneider Electric Modicon M580 UMAS function code 0x28 denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the UMAS function code 0x28 functionality of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.70. A specially crafted UMAS command can cause the device to enter a non-recoverable fault...

7.5CVSS7.7AI score0.01821EPSS
Exploits1
Talos
Talos
added 2019/06/10 12:0 a.m.148 views

Schneider Electric Modicon M580 UMAS read memory block information disclosure vulnerability

Summary An exploitable information disclosure vulnerability exists in the UMAS read memory block function of the Schneider Electric Modicon M580 programmable automation controller, firmware version SV2.70. A specially crafted UMAS command can cause the device to return blocks of memory, resulting...

7.5CVSS7.6AI score0.03279EPSS
Exploits1
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.3 views

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and network device management system, as well as the Cisco Evolved Programmable Network Manager software, allows a malicious actor to execute arbitrary SQL queries.

The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network Manager software relates to input validation errors. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries by sending specially...

8.5CVSS7.9AI score0.01901EPSS
Exploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.4 views

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and network device management system, as well as the Cisco Evolved Programmable Network Manager software, allows a malicious actor to execute arbitrary SQL queries.

The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network Manager software relates to input validation errors. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries by sending specially...

8.5CVSS7.9AI score0.01901EPSS
Exploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.4 views

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and network device management system, as well as the Cisco Evolved Programmable Network Manager software, allows a malicious actor to execute arbitrary code with root privileges.

The vulnerability of the web-based administration interface of the Cisco Prime Infrastructure monitoring and network management system, as well as the Cisco Evolved Programmable Network Manager software, is related to incorrect data input validation. Exploiting this vulnerability could allow an...

10CVSS8.2AI score0.98092EPSS
Exploits12References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.5 views

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and network device management system, as well as the Cisco Evolved Programmable Network Manager software, allows a malicious actor to execute arbitrary code with root privileges.

The vulnerability of the Web interface of the Cisco Prime Infrastructure software for managing network life cycles and the Cisco Evolved Programmable Network Manager software for managing network services is related to incorrect data input validation. Exploiting this vulnerability could allow a...

9.8CVSS7.8AI score0.04415EPSS
Exploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.2 views

The vulnerability of the microprogrammed programmable logic controller SCALANCE, related to insufficient neutralization of special elements, allows a intruder to execute arbitrary system commands.

The vulnerability of the microprogrammed programmable logic controller SCALANCE is related to the insufficient neutralization of certain special elements. Exploiting this vulnerability could allow a intruder, who does not have access to the Aruba Instant web interface, to execute arbitrary system...

10CVSS7.8AI score0.04631EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder