Lucene search
+L

6989 matches found

CVE
CVE
•added 2022/05/02 7:01 p.m.•121 views

CVE-2022-28613

Hitachi Energy RTU500 CMU Firmware versions 12.0.–13.2. are affected by CVE-2022-28613 due to a validation error in the MBAP header length handling in the HCI Modbus TCP function. Exploitation could cause a reboot of the RTU500 CMU when HCI Modbus TCP is enabled, with CVSS v3.1 base score 7.5 (NE...

7.8CVSS7.3AI score0.0099EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2022/05/02 7:01 p.m.•58 views

CVE-2022-28613 Specially Crafted Modbus TCP Packet Vulnerability in RTU500 series

A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is en-abled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500, causing the receiving RTU500 CMU to reboot. The...

7.5CVSS7.5AI score0.0099EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/05/02 12:00 a.m.•13 views

PT-2022-2442 · Hitachi Energy · Rtu500 Series Cmu Firmware

Name of the Vulnerable Software and Affected Versions: Hitachi Energy RTU500 series CMU Firmware versions 12.0. through 13.2. Description: A vulnerability exists in the HCI Modbus TCP function, which can be exploited by sending a specially crafted message to the RTU500, causing it to reboot. This...

7.8CVSS6.5AI score0.0099EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2022/05/02 12:00 a.m.•35 views

Hitachi Energy RTU500 输入验证错误漏洞

Hitachi Energy RTU500 is a series of industrial control components from Hitachi, Ltd Hitachi, Japan. The Hitachi Energy RTU500 suffers from an input validation error vulnerability that stems from a length information validation error carried in MBAP. An attacker could exploit the vulnerability by...

7.8CVSS7.3AI score0.0099EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/02 12:00 a.m.•5 views

CVE-2022-28613: Improper Validation of Specified Quantity in Input

A vulnerability exists in the HCI Modbus TCP function included in the product versions listed above. If the HCI Modbus TCP is en-abled and configured, an attacker could exploit the vulnerability by sending a specially crafted message to the RTU500, causing the receiving RTU500 CMU to reboot. The...

7.8CVSS7.2AI score0.0099EPSS
SaveExploits0References3
OSV
OSV
•added 2022/04/27 4:15 p.m.•18 views

CVE-2021-34588

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot...

8.6CVSS5.8AI score0.00904EPSS
SaveExploits0References1
NVD
NVD
•added 2022/04/27 4:15 p.m.•38 views

CVE-2021-34588

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot...

8.6CVSS0.00904EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/04/27 3:15 p.m.•38 views

CVE-2021-34588 Bender Charge Controller: Unprotected data export

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot...

8.6CVSS8.6AI score0.00904EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/04/27 10:00 a.m.•7 views

CVE-2021-34588

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot...

8.6CVSS7.2AI score0.00904EPSS
SaveExploits0References2Affected Software4
CNNVD
CNNVD
•added 2022/04/27 12:00 a.m.•14 views

Bender ebee 充电控制器 安全漏洞

The ebee is a charge controller from Bender. A security vulnerability exists in the Bender ebee Charge Controller that stems from an unprotected data export. The backup export is protected by a random key. The key is set at user login. It is empty after a reboot. An attacker can exploit this...

8.6CVSS8AI score0.00904EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/04/25 4:16 p.m.•8 views

CVE-2022-27374

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub42E328 at /goform/SysToolReboot...

7.1CVSS5.9AI score0.00455EPSS
SaveExploits1References2
OSV
OSV
•added 2022/04/25 4:16 p.m.•19 views

CVE-2022-27374

Tenda AX12 V22.03.01.21CN was discovered to contain a Cross-Site Request Forgery CSRF via the function sub42E328 at /goform/SysToolReboot...

6.5CVSS5.8AI score0.00455EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/04/25 12:00 a.m.•75 views

Reolink Rlc-410W Denial of Service Vulnerability (CNVD-2022-37377)

Reolink Rlc-410W is a Wifi security camera from Reolink China.Reolink RLC-410W version v3.0.0.13620121102 contains a security vulnerability that can be exploited by attackers to cause a reboot via a compiled HTTP request...

8.6CVSS2.7AI score0.01799EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/04/25 12:00 a.m.•32 views

Reolink Rlc-410W Denial of Service Vulnerability (CNVD-2022-37379)

Reolink Rlc-410W is a Wifi security camera from Reolink China.The Reolink RLC-410W has a security vulnerability that can be exploited by attackers to cause a reboot via a compiled HTTP request...

8.6CVSS2.8AI score0.01799EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/04/25 12:00 a.m.•59 views

Reolink Rlc-410W Denial of Service Vulnerability (CNVD-2022-37378)

Reolink Rlc-410W is a Wifi security camera from Reolink China.A denial of service vulnerability exists in Reolink RLC-410W, which can be exploited by attackers to cause a reboot via a compiled HTTP request...

8.6CVSS2.8AI score0.01799EPSS
SaveExploits1References1
GithubExploit
GithubExploit
•added 2022/04/21 4:04 a.m.•688 views

Exploit for Infinite Loop in Openssl

CVE-2022-0778 Description We refer to the concept of dra...

7.5CVSS7AI score0.73188EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
•added 2022/04/21 12:00 a.m.•26 views

The vulnerability of the AppNav-XE function in the Cisco IOS XE operating system allows a hacker to trigger a device reboot or cause a service failure.

The vulnerability of the AppNav-XE function in the Cisco IOS XE operating system is related to improper locking of resources. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause a service failure by sending a TCP traffic...

8.6CVSS6.4AI score0.00961EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2022/04/20 8:15 p.m.•25 views

Denial of service

A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP interface SCN-IP000.03 before v3.0.4, that allows a remote attacker to turn the device unresponsive to all requests on the KNXnet/IP Secure layer, until the device is rebooted, via a...

7.8CVSS7.3AI score0.04581EPSS
SaveExploits2References3Affected Software2
attackerkb
attackerkb
•added 2022/04/20 4:00 p.m.•14 views

CVE-2022-20783

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient inp...

7.8CVSS7.3AI score0.01428EPSS
SaveExploits0References2
Cisco
Cisco
•added 2022/04/20 4:00 p.m.•86 views

Cisco TelePresence Collaboration Endpoint and RoomOS Software H.323 Denial of Service Vulnerability

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient inp...

7.5CVSS7.6AI score0.01428EPSS
SaveExploits0References1
Rows per page
Query Builder