3S-Smart Software Solutions CODESYS Runtime Remote Code Execution Vulnerability

3S-Smart Software Solutions CODESYS Runtime is a controller real-time runtime system based on IEC61131-3 standard programming from 3S-Smart Software Solutions, Germany. The system transforms any embedded or PC-based device into an IEC61131-3 compliant industrial controller. A security vulnerabili...

Denial of Service Vulnerability in GX Works2 (CNVD-2020-32342)

GX Works2 is a PLC programming software. A denial of service vulnerability exists in GX Works2. An attacker could cause a denial of service by sending constructed malicious packets that cause it to experience an illegal memory access resulting in a denial of service, or could potentially execute...

Denial of Service Vulnerability in GX Works2 (CNVD-2020-28228)

GX Works2 is a PLC programming software. GX Works2 suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

The vulnerability of the programming software for PLCs (programmable logic controllers), namely EcoStruxure Control Expert, is related to deficiencies in access control. This vulnerability allows a intruder to bypass the authentication process between EcoStruxure Control Expert and the PLC.

The vulnerability of the EcoStruxure Control Expert programming tool for programmable logic controllers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process between the EcoStruxure Control Expert and the...

Command Execution Vulnerability in WideField3

WideField3 is a PLC programming software developed by Yokogawa Electric Group. A command execution vulnerability exists in WideField3, which can be exploited by an attacker to execute malicious code...

The vulnerability of the programmable user-programmable gate array (PPVM) for Xilinx Spartan, Artix, Kintex, and Virtex programmable integrated circuits lies in the possibility of intercepting/mocking the file containing the encrypted control bitstream, allowing a hacker to gain full control over the programmable integrated circuits.

The vulnerability of the programmable user-programmable gate array PPVM for Xilinx Spartan, Artix, Kintex, and Virtex programmable logic integrated circuits lies in the ability to intercept or replace the file containing the encrypted control bitstream. Exploiting this vulnerability can allow an...

Multiple Schneider Electric Products Data Forgery Issue Vulnerabilities

Schneider Electric Modicon M218 Logic Controller, etc. are a programmable logic controller from Schneider Electric France. A data forgery vulnerability exists in multiple Schneider Electric products, which can be exploited by attackers to execute malicious code...

Unspecified Vulnerability in Multiple Schneider Electric Products (CNVD-2021-25704)

Schneider Electric Modicon M218 Logic Controller, etc. are a programmable logic controller from Schneider Electric France. A security vulnerability exists in a number of Schneider Electric products, which arises from a program that transmits sensitive information in clear text and can be exploite...

Unpatchable 'Starbleed' Bug in FPGA Chips Exposes Critical Devices to Hackers

A newly discovered unpatchable hardware vulnerability in Xilinx programmable logic products could allow an attacker to break bitstream encryption, and clone intellectual property, change the functionality, and even implant hardware Trojans. The details of the attacks against Xilinx 7-Series and...

Intel FPGA Programmable Acceleration Card N3000 Elevation of Privilege Vulnerability

The Intel FPGA Programmable Acceleration Card N3000 is a full-duplex 100 Gbps in-system reprogrammable acceleration card for multi-workload network application acceleration. An elevation of privilege vulnerability exists in the Intel FPGA Programmable Acceleration Card N3000. An attacker can...

CVE-2019-14625

The CVE-2019-14625 issue affects the Intel FPGA Programmable Acceleration Card N3000 (all versions) and is described as improper access control in on-card storage. The underlying problem allows a privileged local attacker to potentially cause a denial of service. The Intel advisory confirms this ...

CVE-2019-14626

The CVE-2019-14626 issue affects the Intel FPGA Programmable Acceleration Card N3000 (PCIe function). The root cause is improper access control in the PCIe function, which may allow a privileged local user to escalate privileges. Affected versions are all versions of the N3000. Reports/entries de...

CVE-2019-14625: Undefined Security Weakness

Improper access control in on-card storage for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user to potentially enable denial of service via local access...

WAGO PFC100 Resource Management Error Vulnerability

The WAGO PFC100 is a programmable logic controller PLC from WAGO Germany. A source management error vulnerability exists in the WAGO PFC100 funding, which can be exploited by an attacker to cause a denial of service...

WAGO PFC200 Input Validation Error Vulnerability

The WAGO PFC 200 is a programmable logic controller PLC from the German company WAGO. An input validation error vulnerability exists in the cloud connectivity feature in WAGO PFC 200 using firmware versions 03.02.0214, 03.01.0713, and 03.00.3912. An attacker could exploit this vulnerability to ga...

CVE-2019-14626: Undefined Security Weakness

Improper access control in PCIe function for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user to potentially enable escalation of privilege via local access...

WAGO PFC 200 Operating System Command Injection Vulnerability

The WAGO PFC 200 is a programmable logic controller PLC from the German company WAGO. An operating system command injection vulnerability exists in the cloud connectivity feature of the WAGO PFC 200 using firmware versions 03.02.0214, 03.01.0713, and 03.00.3912. The vulnerability stems from a...

CVE-2020-6986

In all versions of Omron PLC CJ Series, an attacker can send a series of specific data packets within a short period, causing a service error on the PLC Ethernet module, which in turn causes a PLC service denied result...

The vulnerability in the vManage web interface of Cisco SD-WAN’s programmatically defined network allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability in the vManage web interface of Cisco’s programmable network architecture involves a lack of protection for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...

Multiple Siemens Products Resource Consumption Vulnerability

Siemens SIMATIC S7-300 CPUs etc. are products of Siemens, Germany.SIMATIC S7-300 CPUs is a CPU Central Processing Unit module.Siemens SIMATIC S7-1200 is a PLC Programmable Logic Controller of the S7-1200 series. Siemens SIMATIC S7-400 is a programmable logic controller for manufacturing and proce...