CVE-2018-13191

The mintToken function of a smart contract implementation for Super Carbon Coin SCC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

ICSA-18-317-01 Siemens IEC 61850 System Configurator, DIGSI 5, DIGSI 4, SICAM PAS/PQS, SICAM PQ Analyzer, and SICAM SCC

1. EXECUTIVE SUMMARY CVSS v3 4.2 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: IEC 61850 system configurator, DIGSI 5, DIGSI 4, SICAM PAS/PQS, SICAM PQ Analyzer, and SICAM SCC Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability...

CVE-2013-7462

The CVE-2013-7462 entry describes a directory traversal vulnerability in McAfee/SCC Platform prior to patch 1070 (6.14) and prior to patch 1076 (6.15). An unauthenticated user could view contents of arbitrary system files that lacked file-system read restrictions via a null-byte injection exploit...

Design/Logic Flaw

A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete control of the system...

CVE-2015-2867

CVE-2015-2867 affects Trane ComfortLink II SCC firmware 2.0.2. Talos reports a design flaw that, during boot, installs two hardcoded user credentials (root: Cold,,2100AAAAA and raptor21: Cold,,2100RRRRR) enabling remote SSH access and local root privilege escalation. The vulnerability allows remo...

Trane ComfortLink II SCC Service Hardcoded Credentials Vulnerability

Talos Vulnerability Report TALOS-2016-0028 Trane ComfortLink II SCC Service Hardcoded Credentials Vulnerability February 8, 2016 CVE Number CVE-2015-2867 Description A design flaw in the Trane ComfortLink II SCC service allows remote attackers to take complete control of the system. During system...

CVE-2013-2968

IBM Sterling Control Center (SCC) is affected by CVE-2013-2968 due to a buffer-read flaw in a component used when reading large files without end-of-line characters. Affected SCC versions are 5.2 (up to 5.2.0.8), 5.3 (up to 5.3.0.3), and 5.4 (up to 5.4.0.1). The issue can allow remote authenticat...

CVE-2013-2969

IBM Sterling Control Center (SCC) is affected by CVE-2013-2969 (XSS) in releases 5.2.0.9 and earlier, 5.3.x up to 5.3.0.3, and 5.4 up to 5.4.0.1. The issue allows remote authenticated users to inject arbitrary web script or HTML via vectors involving invalid characters. Remediation is to upgrade ...

[Open SCAP v0.9.5] Support of SCE - Script Check Engine

SCAP is a line of standards managed by NIST. It was created to provide a standardized approach to maintaining the security of enterprise systems, such as automatically verifying the presence of patches, checking system security configuration settings, and examining systems for signs of compromise...

CA Products That Embed Ingres Multiple Vulnerabilities

Title: CA Products That Embed Ingres Multiple Vulnerabilities CA Advisory Date: 2008-08-01 Reported By: iDefense Labs Impact: A remote attacker can execute arbitrary code, gain privileges, or cause a denial of service condition. Summary: CA products that embed Ingres contain multiple...