3547 matches found
RSA Conference 2019: Operational Technology Widens Supply Chain Attack Surfaces
SAN FRANCISCO – Today’s supply chain has evolved, with operational technology OT used in factories increasingly becoming connected and converging with IT systems — introducing new attack vectors. This new reality is vital for companies to understand in the context of risk, according to Dawn...
LAquis SCADA Web Server Command Injection (CVE-2018-18992)
A command injection exists in LAquis SCADA web server. The vulnerability is due to insufficient input sanitization, which permits command injection. A remote attacker could exploit this vulnerability by sending a crafted request to an affected server...
Advantech WebAccess SCADA Buffer Overflow (CVE-2018-7499)
A overflow vulnerability exists in the service of Advantech WebAccess. The vulnerability is due to a lack of data verification. Successful exploitation could lead to arbitrary code execution...
Circutor PowerStudio Scada Detection (Windows SMB Login)
Detects the installed version of Circutor PowerStudio Scada for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Authentication flaw
WebAccess/SCADA, Version 8.3. Specially crafted requests could allow a possible authentication bypass that could allow an attacker to obtain and manipulate sensitive information...
CVE-2019-6523
WebAccess/SCADA, Version 8.3. The software does not properly sanitize its inputs for SQL commands...
CVE-2019-6521
WebAccess/SCADA, Version 8.3. Specially crafted requests could allow a possible authentication bypass that could allow an attacker to obtain and manipulate sensitive information...
CVE-2019-6523
WebAccess/SCADA, Version 8.3. The software does not properly sanitize its inputs for SQL commands...
CVE-2019-6519
WebAccess/SCADA, Version 8.3. An improper authentication vulnerability exists that could allow a possible authentication bypass allowing an attacker to upload malicious data...
Sql injection
WebAccess/SCADA, Version 8.3. The software does not properly sanitize its inputs for SQL commands...
Authentication flaw
WebAccess/SCADA, Version 8.3. An improper authentication vulnerability exists that could allow a possible authentication bypass allowing an attacker to upload malicious data...
CVE-2019-6523
WebAccess/SCADA, Version 8.3. The software does not properly sanitize its inputs for SQL commands...
CVE-2019-6521
WebAccess/SCADA, Version 8.3. Specially crafted requests could allow a possible authentication bypass that could allow an attacker to obtain and manipulate sensitive information...
CVE-2019-6519
WebAccess/SCADA, Version 8.3. An improper authentication vulnerability exists that could allow a possible authentication bypass allowing an attacker to upload malicious data...
CVE-2019-6519
The CVE-2019-6519 entry concerns Advantech WebAccess/SCADA, Version 8.3, which contains an improper authentication vulnerability that could allow an authentication bypass and upload of malicious data. The issue affects WebAccess/SCADA 8.3 and has a CVSS v3 base score of 9.8 (critical) with remote...
CVE-2019-6521
Affected product: Advantech WebAccess/SCADA Version 8.3. The CVE-2019-6521 issue is an authentication bypass via an alternate path or channel, allowing a remote attacker (no authentication required) to obtain and manipulate sensitive information. ICSA-19-024-01 explicitly documents this vulnerabi...
CVE-2019-6523
Affected product: Advantech WebAccess/SCADA, Version 8.3. Vulnerability: CVE-2019-6523 – improper sanitization of inputs for SQL commands (SQL injection) in WebAccess/SCADA 8.3. Root cause / details: The affected component/process does not properly sanitize inputs used in SQL queries, enabling po...
CVE-2018-18990
LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation. An attacker can leverage this vulnerability to disclose sensitive information under the context of the web server process...