2600 matches found
Schneider-electric Quantum Improper Authentication
The ComputePassword function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device aka the Quantum 140NOE771 module generates the password for the fwupgrade account by performing a calculation on the MAC address, which makes it easier for remote attackers to obtain access via a ...
Schneider-electric Quantum Unspecified Vulnerability
The modbus125handler function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device aka the Quantum 140NOE771 module allows remote attackers to install arbitrary firmware updates via a MODBUS 125 function code to TCP port 502. File data ot500059.nasl...
CVE-2019-16905
A Denial of service flaw was found in the way OpenSSH parsed certain specially crafted XMSS eXtended Merkle Signature Scheme private keys. Any OpenSSH functionality which parses private keys is vulnerable, for example: 1. If ‘sshd’ daemon is configured to use an XMSS host key that is malformed, i...
Schneider 140NOE77101 Ethernet Module MODBUS Protocol Denial of Service Vulnerability
The 140NOE77101 is an Ethernet communication module for the Quantum series of PLCs from Schneider. A denial of service vulnerability exists in the MODBUS protocol of the Schneider 140NOE77101 Ethernet Module, which can be exploited by an attacker to be a denial of service to the server...
CVE-2019-6845
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum all firmware versions, which could cause the disclosure of information when transferring applications to the controller using Modbus TCP protocol...
CVE-2019-6845
The CVE-2019-6845 vulnerability affects Schneider Electric Modicon M580 (and related models) due to cleartext transmission of sensitive information via UMAS, and is tied to FTP/TFTP and device programming data paths. Talos reports an exploitable information-disclosure in UMAS with cleartext trans...
CVE-2019-6845
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum all firmware versions, which could cause the disclosure of information when transferring applications to the controller using Modbus TCP protocol...
PT-2019-18376
Name of the Vulnerable Software and Affected Versions Modicon M580 all firmware versions Modicon M340 all firmware versions Modicon Premium all firmware versions Modicon Quantum all firmware versions Description A File and Directory Information Exposure issue exists, which could cause the...
CVE-2019-6845: Cleartext Transmission of Sensitive Information
A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum all firmware versions, which could cause the disclosure of information when transferring applications to the controller using Modbus TCP protocol...
CVE-2019-6851: Insertion of Sensitive Information into Externally-Accessible File or Directory
A CWE-538: File and Directory Information Exposure vulnerability exists in Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum all firmware versions, which could cause the disclosure of information from the controller when using TFTP protocol...
Factoring 2048-bit Numbers Using 20 Million Qubits
This theoretical paper shows how to factor 2048-bit RSA moduli with a 20-million qubit quantum computer in eight hours. It's interesting work, but I don't want overstate the risk. We know from Shor's Algorithm that both factoring and discrete logs are easy to solve on a large, working quantum...
PT-2019-5850 · Imagemagick +4 · Imagemagick +4
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: The issue is related to an integer overflow in the MagickCore/quantum-private.h component of the ImageMagick console graphic editor. This allows a remote attacker to cause a denial of service...
PT-2019-5845 · Imagemagick +5 · Imagemagick +5
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: A flaw was found in ImageMagick in MagickCore/quantum.h, related to an integer overflow value. This issue allows a remote attacker to cause a denial of service using a specially crafted file...
CVE-2018-18584
In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too small for the maximal Quantum block, leading to an out-of-bounds write...
PT-2019-5846 · Imagemagick +5 · Imagemagick +5
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: A flaw was found in ImageMagick in MagickCore/quantum.h, related to an integer overflow value. This issue allows a remote attacker to cause a denial of service using a specially crafted file...
PT-2019-3857
Name of the Vulnerable Software and Affected Versions Modicon M580 all firmware versions Modicon M340 all firmware versions Modicon Premium all firmware versions Modicon Quantum all firmware versions Description A Cleartext Transmission of Sensitive Information issue exists, which could cause the...
PT-2019-5856 · Imagemagick +5 · Imagemagick +5
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-68 Description: A floating point math calculation in the ScaleAnyToQuantum function of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigne...
PT-2019-5726 · Imagemagick +5 · Imagemagick +5
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-68 Description: A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined...
A week in security (September 23 – 29)
Last week on Labs, we highlighted an Emotet campaign using Snowden’s new book as a lure, discussed how 15,000 webcams are vulnerable to attack, how insurance data security laws skirt political turmoil, and how the new iOS exploit checkm8 allows permanent compromise of iPhones. Other cybersecurity...
