Miele Benchmark Programming Tool 1.1.49 / 1.2.71 Privilege Escalation

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Privilege Escalation product: Miele Benchmark Programming Tool vulnerable version: at least 1.1.49 and 1.2.71 fixed version: 1.2.72 CVE number: CVE-2022-22521 impact:...

nasm has unspecified vulnerabilities

Nasm is an open source programming tool software by The Nasm Development Team team. nasm 2.16rc0 contains a security vulnerability that stems from the existence of an infinite loop in the gpastetokens function. No details of the vulnerability are currently available...

FATEK Automation WinProladder Integer Overflow Vulnerability

The official version of WinProLadder is a pretty good and useful PLC programming tool. FATEK Automation WinProladder integer overflow vulnerability can be exploited by attackers to cause arbitrary code execution...

CVE-2017-6865

CVE-2017-6865 is a DoS vulnerability in Siemens PROFINET DCP handling affecting multiple Siemens products (WinCC, STEP 7/TIA Portal, PCS 7, WinAC/WinCC flexible, SCT, SINEMA, SINUMERIK, etc.). The root cause is improper input validation, where specially crafted PROFINET DCP broadcast packets on a...