Pyramid Solutions EtherNet/IP Adapter Development Kit

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely, low attack complexity Vendor: Pyramid Solutions, Inc. Equipment: EtherNet/IP Adapter Development Kit Vulnerability: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker with...

Secheron SEPCOS Control and Protection Relay

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Secheron Equipment: SEPCOS Control and Protection Relay Vulnerabilities: Improper Enforcement of Behavioral Workflow, Lack of Administrator Control over Security, Improper Privilege Management,...

Phoenix Contact ProConOS and MULTIPROG

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Phoenix Contact Equipment: ProConOS/ProConOS eCLR and MULTIPROG Vulnerability: Insufficient Verification of Data Authenticity CISA is aware of a public report, known as “OT:ICEFALL” that details...

JTEKT TOYOPUC

1. EXECUTIVE SUMMARY CVSS v3 7.7 ATTENTION: Exploitable remotely Vendor: JTEKT Equipment: TOYOPUC Products Vulnerability: Missing Authentication for Critical Function CISA is aware of a public report, known as “OT:ICEFALL” that details vulnerabilities found in multiple operational technology OT...

Phoenix Contact Classic Line Industrial Controllers

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Phoenix Contact Equipment: ILC 131 ETH, ILC 131 ETH/XC, ILC 151 ETH, ILC 151 ETH/XC, ILC 171 ETH 2TX, ILC 191 ETH 2TX, ILC 191 ME/AN, and AXC 1050 Vulnerability: Missing Authentication for Critical...

Malicious code in test-rule-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa888ca30e7e2ad22793e2eefd4a5d8529cf876ef40b096470c681371f79f07f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in runkit-embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d1a12cf5df9a43c706a5f3c73571ad7199f6a81dd67d4b94d6b91ad149a5f5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usaa-drilldown (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9cdd12172bde7a63c4950340b53ea0113eede4b46f1482c89eaffd27981cc031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in researchgate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad312a066f5a5127e2aa4119cc0278d217a79e07132aeafda865d683283a8fe6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tekion/test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2609d1363588d82a707a669f60ee6ec53cb9074ff0d5a5d86fc219204d2c5ace Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tekion/gamma (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c20b9450ee05c4bea25f008645c52a2d7a47882f5db644374c52ba977e4e26ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 13-pkg-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d11ff8eabd16040bbd151481a728945ea4c50fe74433a661598e30c0d635d26c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ff-webstore-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27b491152f946c0bad55930959436c8ccaac6a656eed2b9283a284769cfd07b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in weixao (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 166d244cc4269f7cabb366e08eca04334a2678450f3d1ef8dd92ad3e6b70a340 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sp-messaging-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f04c7112192b8f05201e25876a21a254bf15d23cc05565b041a89956b5839a66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontend-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f948948cb708426aa6472666cc216fd7945a5ecdc56e50044cdefa0b863323f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mitui-comp-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 006156deee84da1f8ec4b6c671c048f4204524d86e9aa7bdf1d5f8fc5dd8b7b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mysteryofthethreebots (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 522127709f94486e3b8a2d85d0de8481ffdbe354150ee05a04a23d1231894919 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tarojs-plugin-platform-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 229763979e35bacee07bb3e25ac00a7f7435861b89127b32b4fbbb596a9abfb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in github-action-benchmark (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f873a3ef25b833c6a1b1d4b8d5079265a195382dc4dbbfda249bcf9ae8d20c8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...