SIPROTEC 5 File Upload Code Execution

The vulnerability of SIPROTEC 5 devices for relay protection, automation, and control is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

SIPROTEC Relay Protection Random Values

The vulnerability of SIPROTEC 5 relay protection, automation, and control devices is related to the limited number of possible random values. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to the protected information...

Schneider Electric PowerLogic P7 Relay Pointer Assignment Error DoS

The vulnerability of the microprogramming software of Schneider Electric PowerLogic P7 relay protection devices relates to pointer assignment errors. Exploiting this vulnerability could allow an attacker to trigger a service failure...

GE Vernova Enervista UR Setup 安全漏洞

GE Vernova Enervista UR Setup is an interface configuration and management software for relay protection devices developed by GE Vernova in the United States. Versions of GE Vernova Enervista UR Setup prior to version 8.6 contained security vulnerabilities, which were due to a vulnerability relat...

SIPROTEC Relay Protection Device Code Execution

The vulnerability of SIPROTEC relay protection devices is related to insufficient protection of service data during code debugging. Exploiting this vulnerability can allow attackers to execute arbitrary code...

SIPROTEC Relay Protection Default Login Credentials Unauthorized Access

The vulnerability of SIPROTEC relay protection devices is related to the use of default login credentials. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential information...

SIPROTEC relay protection devices Man-in-the-Middle

The vulnerability of SIPROTEC relay protection devices is related to insufficiently secure data encryption. Exploiting this vulnerability allows a malicious actor, operating remotely, to carry out “man-in-the-middle” attacks using specially crafted packets sent to port 4443/tcp...

Schneider Electric Easergy P40 Relay Manipulation

The vulnerability of microprogrammed software in relay protection and control devices from Schneider Electric’s Easergy P40 lies in the use of rigidly encrypted account data. Exploiting this vulnerability could allow a malicious actor to manipulate network traffic remotely...

Siemens SICAM A8000 Command Injection Vulnerability

The Siemens SICAM A8000 is a protection and interval control unit device for relay protection and substation environments from Siemens, Germany. A command injection vulnerability exists in the Siemens SICAM A8000. The vulnerability stems from the device's failure to properly filter constructed...

Siemens SICAM A8000 命令注入漏洞

The Siemens SICAM A8000 is a protection and interval control unit device for relay protection and substation environments from Siemens, Germany. A command injection vulnerability exists in the Siemens SICAM A8000. The vulnerability stems from the device's failure to properly filter constructed...

Schneider Electric Easergy P5 Relay SSH Key Management Unauthorized Access

The vulnerability of the microprogramming software in Schneider Electric Easergy P5 relay protection and control devices is related to errors in managing SSH keys. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

Eaton Form 6 control and Idea/IdeaPLUS information disclosure vulnerabilities

Eaton Form 6 control and Idea/IdeaPLUS are both products of the American company Eaton. The former is a controller product that provides instant access to operations and quickly determines the status of equipment as well as finding equipment faults, while the latter is a set of relay protection...