The vulnerability of the microprogramming software of Schneider Electric’s Modicon M221 programmable logic controller stems from errors in the implementation of the network module in the UMAS protocol. This vulnerability allows a hacker to intercept the network traffic of the controller.

The vulnerability of the microprogramming software of Schneider Electric’s Modicon M221 programmable logic controller is related to the incorrect implementation of the network module in the UMAS protocol. Exploiting this vulnerability allows a malicious actor to intercept the controller’s network...

ALPINE-CVE-2017-12150

It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text...

Multiple Huawei products CIDAM protocol information leakage vulnerability

Huawei DP300 etc. are products of Huawei, China.DP300 is a videoconferencing terminal.RP200 is an all-in-one videoconferencing device.CIDAM is one of the message transfer protocols. An information disclosure vulnerability exists in the CIDAM protocol in several Huawei products due to the...

PT-2020-8059

Name of the Vulnerable Software and Affected Versions: MCabber versions prior to 1.0.4 Description: The issue allows remote attackers to intercept communications or add themselves as an entity on a third party's roster as another user, garnering associated privileges, via crafted XMPP packets. Th...

The vulnerability of the Cisco IOS operating system, which allows a remote attacker to intercept network traffic.

The Cisco IOS operating system does not perform ARP packet authentication, which allows for intercepting traffic processed by devices running this operating system through ARP spoofing attacks...

sp mode mail issue in the verification of SSL certificates

Overview sp mode mail contains an issue in the verification of the SSL server certificate. sp mode mail provided by NTT DOCOMO contains an issue in the verification of the SSL server certificate. Tsukasa Hamano of Open Source Solution Technology Corporation reported this vulnerability to IPA...

PT-2002-2670 · Iomega · Iomega Nas A300U

Name of the Vulnerable Software and Affected Versions: Iomega NAS A300U Description: The issue concerns the transmission of passwords in cleartext by the Network Attached Storage NAS Administration Web Page, allowing remote attackers to intercept the administrative password. Recommendations: For...