TP-Link EAP Controller lacks RMI authentication and is vulnerable to deserialization attacks

Overview The TP-LINK EAP Controller is TP-LINK's software for remotely controlling wireless access point devices. EAP Controller for Linux lacks user authentication for RMI service commands, as well as utilizes an outdated vulnerable version of Apache commons-collections, which may allow an...

Buffer overflow

SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow...

CVE-2018-12897

SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow...

CVE-2018-12897

The affected software is SolarWinds DameWare Mini Remote Control. CVE-2018-12897 describes a local SEH-based buffer overflow in DameWare Mini Remote Control before v12.1. The vulnerability targets the host component and arises from improper handling of input in the host/AMT dialog context, enabli...

PT-2018-11458

Name of the Vulnerable Software and Affected Versions DameWare Mini Remote Control versions prior to 12.1 Description The issue is related to a buffer overflow. Recommendations For versions prior to 12.1, update to version 12.1 or later to resolve the issue...

CVE-2018-12897: Improper Restriction of Operations within the Bounds of a Memory Buffer

SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow...

Ghostscript Flaws Allow Remote Takeover of Systems

UPDATE Researchers have uncovered vulnerabilities in the widely deployed Ghostscript package that allows bad actors to remotely take control of vulnerable systems. As of August 24, 2018, all reported problems have been fixed and will be part of the next Ghostscript release in late September, a...

Denial of Service Vulnerability in Hologic LE5109L PLC (CNVD-2018-18906)

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A denial of service vulnerability exists in the HELISE LE5109L PLC, which can be exploited by an attacker to cause the PLC to be remotely controlled by constructing specific private protoco...

Remote Control Vulnerability in HOLLYWOOD LE5109L PLCs

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A remote control vulnerability exists in the HELISE LE5109L PLC, which can be exploited by an attacker to cause the PLC to be remotely controlled by constructing specific private protocol...

Remote Control Vulnerability in Haiwell C10S0R(-e) PLCs

C10S0R-e PLC is a product in the programmable logic controller PLC series of Xiamen Haiwei Technology Co. The Haiwell C10S0R-e PLC suffers from a remote control vulnerability, which can be exploited by an attacker to control PLC startup and stopping via unauthorized construction of specific netwo...

New Variant of KeyPass Ransomware Discovered

A new variant of the KeyPass ransomware has been gaining traction in August and is using new techniques like manual control to customize its encryption process, researchers said Monday. Researchers at Kaspersky Lab who posted about the trojan said that it is being propagated by means of fake...

Remote Control Vulnerability in Hologic PLC FCS

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A remote control vulnerability exists in the Hologic PLC FCS, which can be exploited by an attacker to arbitrarily control the FCS by sending constructed packets that conform to a private...

Insteon Hub Buffer Overflow Vulnerability (CNVD-2018-14863)

The Insteon Hub is an Insteon central controller product from Insteon USA. This product can remotely control light bulbs, wall switches, air conditioners and more in your home. A buffer overflow vulnerability exists in the Insteon Hub using firmware version 1012. An attacker could exploit the...

CVE-2018-10603

Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux4-01-601cb47 and prior do not perform authentication of IEC-104 control commands, which may allow a rogue node a remote control of the industrial process...

Authentication flaw

Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux4-01-601cb47 and prior do not perform authentication of IEC-104 control commands, which may allow a rogue node a remote control of the industrial process...

CVE-2018-10603

Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux4-01-601cb47 and prior do not perform authentication of IEC-104 control commands, which may allow a rogue node a remote control of the industrial process...

CVE-2018-10603

CVE-2018-10603 affects Martem TELEM-GW6 and GWM devices running firmware 2018.04.18-linux_4-01-601cb47 and prior. The root cause is missing authentication for IEC-104 control commands (CWE-306), enabling a rogue node to remotely control the industrial process. Public documents confirm a high/seve...

Multiple Cobalt Personality Disorder

Introduction Despite the notion that modern cybersecurity protocols have stopped email-based attacks, email continues to be one of the primary attack vectors for malicious actors — both for widespread and targeted operations. Recently, Cisco Talos has observed numerous email-based attacks that ar...

PT-2018-9994

Name of the Vulnerable Software and Affected Versions: Martem TELEM GW6 and GWM devices with firmware prior to 2018.04.18-linux 4-01-601cb47 Description: The issue concerns a lack of authentication for IEC-104 control commands, potentially allowing a rogue node to remotely control the industrial...

CVE-2018-10603: Missing Authentication for Critical Function

Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux4-01-601cb47 and prior do not perform authentication of IEC-104 control commands, which may allow a rogue node a remote control of the industrial process...