Unauthorized operation vulnerability in NA300 PLC (CNVD-2018-26208)

The NA300 PLC is a mid-size programmable controller. An unauthorized operation vulnerability exists in the NA300 PLC. An attacker can exploit the vulnerability to remotely tamper with system inputs and outputs, variable values, etc...

Weak password vulnerability in NA300 PLC

The NA300 PLC is a mid-size programmable controller. A weak password vulnerability exists in the NNA300 PLC. An attacker could gain full control of the PLC through this vulnerability...

NA300 PLC has an unauthorized operation vulnerability

The NA300 PLC is a mid-size programmable controller. An unauthorized operation vulnerability exists in the NA300 PLC. An attacker can exploit the vulnerability to remotely tamper with the MAIN program in the PLC...

NA300 PLC has information leakage vulnerability

The NA300 PLC is a mid-size programmable controller. An information disclosure vulnerability exists in the NA300 PLC. An attacker can exploit the vulnerability to disclose the PLC ftp service account and password...

Delta WPLSoft suffers from a buffer overflow vulnerability

WPLSoft is a plc programming tool. A buffer overflow vulnerability exists in Delta WPLSoft. An attacker can construct malformed data to cause the software to crash...

Micronet INplc-RT Buffer Overflow Vulnerability

Micronet INplc-RT is a software-defined PLC Programmable Logic Controller from Micronet Japan. A buffer overflow vulnerability exists in Micronet INplc-RT version 3.08 and earlier. A remote attacker could exploit this vulnerability to cause a denial of service or execute arbitrary code...

The vulnerability of microprogrammed software in Schneider Electric Modicon M221 programmable logic controllers is caused by access control errors, which allow attackers to decode passwords.

The vulnerability of the microprogrammed software in Schneider Electric Modicon M221 programmable logic controllers is caused by access control errors. Exploiting this vulnerability could allow an attacker to decode passwords using a rainbow table...

The vulnerability of the microprogrammed software of Schneider Electric Modicon M221, caused by errors in handling exceptional states, allows a intruder to perform a system reboot.

The vulnerability of the microprogrammed software in Schneider Electric Modicon M221 programmable logic controllers arises due to errors in handling exceptional states. Exploiting this vulnerability can allow an attacker to remotely perform a system reboot...

The vulnerability of microprogrammed software in Schneider Electric Modicon M221 programmable logic controllers arises from deficiencies in the authentication process, which allows attackers to bypass the authentication procedures.

The vulnerability of the microprogrammed software in Schneider Electric Modicon M221 programmable logic controllers is due to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypass the authentication process remotely...

CVE-2018-7790

An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product all references, all versions prior to firmware V1.6.2.0. The vulnerability allows unauthorized users to replay authentication sequences. If an attacker exploits this vulnerability and connects to a...

Schneider Electric Modicon M221 Authentication Sequence Replay Vulnerability

The Modicon M221 is a logic controller from Schneider Electric. The Schneider Electric Modicon M221 suffers from an authentication sequence replay vulnerability that can be exploited by an attacker to replay the authentication sequence, which can be used to connect to the Modicon M221 and upload...

Denial of Service Vulnerability in Hologic LE5109L PLC (CNVD-2018-18909)

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A denial of service vulnerability exists in the HELISE LE5109L PLC, which can be exploited by an attacker to cause a denial of service in the PLC by constructing specific private protocol...

Arbitrary Program Removal Vulnerability in HOLLYWOOD LE5109L PLCs

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. An arbitrary program removal vulnerability exists in the HELISE LE5109L PLC, which can be exploited by an attacker to cause malicious removal of programs from the PLC controller via...

Denial of Service Vulnerability in Hologic LE5109L PLC (CNVD-2018-18910)

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A denial of service vulnerability exists in the HELISE LE5109L PLC, which can be exploited by an attacker to cause a denial of service in the PLC by unauthorized construction of specific...

Remote Controller Removal Vulnerability in HOLLYWOOD LE5109L PLCs

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A remote controller removal vulnerability exists in the Hologic LE5109L PLC, where an attacker can construct specific modbus packets to remotely remove all program and configuration...

Denial of Service Vulnerability in Hologic LE5109L PLC (CNVD-2018-18906)

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A denial of service vulnerability exists in the HELISE LE5109L PLC, which can be exploited by an attacker to cause the PLC to be remotely controlled by constructing specific private protoco...

Remote Control Vulnerability in HOLLYWOOD LE5109L PLCs

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A remote control vulnerability exists in the HELISE LE5109L PLC, which can be exploited by an attacker to cause the PLC to be remotely controlled by constructing specific private protocol...

Remote Control Vulnerability in Haiwell C10S0R(-e) PLCs

C10S0R-e PLC is a product in the programmable logic controller PLC series of Xiamen Haiwei Technology Co. The Haiwell C10S0R-e PLC suffers from a remote control vulnerability, which can be exploited by an attacker to control PLC startup and stopping via unauthorized construction of specific netwo...

Information Disclosure Vulnerability in Haiwell C10S0R(-e) PLCs

C10S0R-e PLC is a product in the programmable logic controller PLC series of Xiamen Haiwei Technology Co. The Haiwell C10S0R-e PLC suffers from an information disclosure vulnerability that can be exploited by an attacker to obtain PLC configuration information via unauthorized construction of...

Memory Arbitrary Tampering Vulnerability in Haiwell C10S0R(-e) PLCs

C10S0R-e PLC is a product in the programmable logic controller PLC series of Xiamen Haiwei Technology Co. The Haiwell C10S0R-e PLC suffers from an arbitrary memory tampering vulnerability, which can be exploited by an attacker to control the output of the PLC via unauthorized construction of...