CVE-2020-27279

CVE-2020-27279 is a NULL pointer dereference in the Crimson 3.1 protocol converter. A specially crafted packet can reboot Crimson 3.1 devices (Build versions prior to 3119.001). Affected product: Red Lion Crimson 3.1 for the DA10D Protocol Converter. Impact: potential denial-of-service via reboot...

PT-2021-11363

Name of the Vulnerable Software and Affected Versions: Crimson 3.1 versions prior to 3119.001 Description: A NULL pointer deference issue has been identified in the protocol converter. An attacker could send a specially crafted packet that could reboot the device. Recommendations: For Crimson 3.1...

CVE-2020-27279: NULL Pointer Dereference

A NULL pointer deference vulnerability has been identified in the protocol converter. An attacker could send a specially crafted packet that could reboot the device running Crimson 3.1 Build versions prior to 3119.001...

Crimson Null Pointer Dereference Vulnerability

Crimson is a programming software from Red Lion. A null pointer dereference vulnerability exists in the protocol converter in Crimson. An attacker could exploit this vulnerability by sending specially crafted packets to cause the device to reboot...

Red Lion Controls Crimson 代码问题漏洞

Crimson is a programming software from Red Lion. A null pointer dereference vulnerability exists in the protocol converter in Crimson. An attacker could exploit this vulnerability by sending specially crafted packets to cause the device to reboot...

Arista Networks Arista EOS Security Breach

Arista Networks Arista EOS is a scalable operating system for data centers and cloud network centers from Arista Networks, Inc. Arista EOS builds cloud architectures that scale to hundreds of thousands of compute and storage nodes with management and provisioning capabilities for large-scale jobs...

Code injection

Beijing Huorong Internet Security 5.0.55.2 allows a non-admin user to escalate privileges by injecting code into a process, and then waiting for a Huorong services restart or a system reboot...

CVE-2020-35364

Beijing Huorong Internet Security 5.0.55.2 allows a non-admin user to escalate privileges by injecting code into a process, and then waiting for a Huorong services restart or a system reboot...

Beijing Huorong Internet Security Injection Vulnerability

ESET Internet Security is a suite of antivirus software for Internet security from ESET Slovakia. An injection vulnerability exists in Beijing Huorong Internet Security 5.0.55.2, which allows a non-administrative user to escalate privileges by injecting code into a process and then waiting for th...

Logic Flaw Vulnerability in Spectranet 4G LTE Mobile Router

Spectranet 4G LTE Mobile Router is a mobile router. A logic flaw vulnerability exists in the Spectranet 4G LTE Mobile Router. An attacker can exploit the vulnerability to obtain sensitive information, make arbitrary configuration changes, and override reboot commands...

Unspecified Vulnerability in Phoenix Contact mGuard Devices

Phoenix Contact Mguard is a firewall device for industrial environments from Phoenix Contac. The device features multiple protection modes, deep packet inspection, malware and virus detection. A security vulnerability exists in Phoenix Contact mGuard Devices, which stems from the fact that for...

Cisco Aironet access point restart

The vulnerability of Cisco Aironet Access Point’s microprogramming software is related to errors in processing authentication requests from multiple clients. Exploiting this vulnerability could allow a malicious actor to reboot the device remotely...

CVE-2020-12521

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot...

CVE-2020-12523

On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports g...

CVE-2020-12521

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot...

CVE-2020-12523

On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports g...

Design/Logic Flaw

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS a specially crafted LLDP packet may lead to a high system load in the PROFINET stack. An attacker can cause failure of system services or a complete reboot...

CVE-2020-12523 Phoenix Contact mGuard Devices versions before 8.8.3: LAN ports get functional after reboot even if they are disabled in the device configuration

On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports g...

Phoenix Contact mGuard Devices 安全漏洞

Phoenix Contact Mguard is a firewall device for industrial environments from Phoenix Contac. The device features multiple protection modes, deep packet inspection, malware and virus detection. A security vulnerability exists in Phoenix Contact mGuard Devices, which stems from the fact that for...

CVE-2020-12523: Missing Initialization of Resource

On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports g...