CVE-2020-25705

CVE-2020-25705 is a Linux kernel ICMP handling flaw that lets an off-path attacker bypass UDP source port randomization and rapidly scan open UDP ports. Affected products include various kernel versions and embedded/Linux-based devices; remediation is via kernel updates (e.g., CentOS/AlmaLinux ad...

CVE-2020-25705

A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well on the Linux Bas...

CVE-2020-15783

A vulnerability has been identified in SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC TDC CPU555 All versions, SINUMERIK 840D sl All versions. Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC TDC CPU555 All versions, SINUMERIK 840D sl All versions. Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port...

CVE-2020-15783

A vulnerability has been identified in SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC TDC CPU555 All versions, SINUMERIK 840D sl All versions. Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port...

CVE-2020-15783

CVE-2020-15783 affects Siemens devices: SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants), SIMATIC TDC CPU555, and SINUMERIK 840D sl (all versions). The issue is described as an Uncontrolled Resource Consumption vulnerability where sending multiple specially crafted packets...

Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller Denial of Service Vulnerability

Siemens SIMATIC S7-300 CPUs is a CPU Central Processing Unit module from Siemens, Germany.Siemens SINUMERIK 840D sl is an advanced machine tool CNC control system from Siemens, Germany. A denial of service vulnerability exists in the Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller. An attack...

Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller (Update A)

1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: SIMATIC S7-300 CPUs and SINUMERIK Controller Vulnerability: Uncontrolled Resource Consumption 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-20-315-04...

Vulnerabilities identified in GNU/Linux subsystem of Siemens SIMATIC S7-1500 CPU

Vulnerabilities have been identified in the GNU/Linux subsystem of Siemens SIMATIC S7-1500 CPU. The vulnerabilities allow a malicious person able to perform attacks leading to the following categories of damage: Denial-of-Service DoS. Manipulation of data Circumvention of security measure Remote...

Vulnerabilities fixed in Siemens Ruggedcom and Scalance

Siemens has fixed multiple vulnerabilities in several Ruggedcom and Scalance products. A remote malicious person could potentially exploit the vulnerabilities to cause a denial-of-service of dnsmasq or execute arbitrary code. To do this requires sending malicious network traffic to the vulnerable...

SIMATIC S7-300 has a Denial of Service Vulnerability

The S7-300 is a modular compact PLC system. A denial of service vulnerability exists in SIMATIC S7-300, which can be exploited by an attacker to cause a denial of service to the server...

SIMATIC S7-300 has a Denial of Service Vulnerability

The S7-300 is a modular compact PLC system. A denial of service vulnerability exists in SIMATIC S7-300, which can be exploited by an attacker to cause a denial of service to the server...

SIMATIC S7-300 PLC has a vulnerability in an industrial control device.

The S7-300 is a modular compact PLC system. An industrial control device vulnerability exists in the SIMATIC S7-300 PLC that can be exploited by an attacker to cause a denial of service to the server...

SIMATIC S7-300 has a Denial of Service Vulnerability

SIEMENS generally refers to Siemens AG. Founded in 1847, Siemens AG is a global leader in electrical and electronic engineering. A denial of service vulnerability exists in SIMATIC S7-300, which can be exploited by an attacker to cause the server to deny service...

CVE-2020-15791

A vulnerability has been identified in SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC S7-400 CPU family incl. SIPLUS variants All versions, SIMATIC WinAC RTX F 2010 All versions, SINUMERIK 840D sl All versions. The authentication protocol between a...

CVE-2020-15786

A vulnerability has been identified in SIMATIC HMI Basic Panels 2nd Generation incl. SIPLUS variants All versions V16, SIMATIC HMI Comfort Panels incl. SIPLUS variants All versions = V16, SIMATIC HMI Mobile Panels All versions = V16, SIMATIC HMI Unified Comfort Panels All versions = V16. Affected...

CVE-2020-15787

A vulnerability has been identified in SIMATIC HMI Unified Comfort Panels All versions = V16. Affected devices insufficiently validate authentication attempts as the information given can be truncated to match only a set number of characters versus the whole provided string. This could allow a...

CVE-2020-15786

A vulnerability has been identified in SIMATIC HMI Basic Panels 2nd Generation incl. SIPLUS variants All versions V16, SIMATIC HMI Comfort Panels incl. SIPLUS variants All versions = V16, SIMATIC HMI Mobile Panels All versions = V16, SIMATIC HMI Unified Comfort Panels All versions = V16. Affected...

CVE-2020-10050

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The directory of service executables of the affected application could allow a local attacker to include arbitrary commands that are executed with SYSTEM privileges when the system restarts...

CVE-2020-10049

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The start-stop scripts for the services of the affected application could allow a local attacker to include arbitrary commands that are executed when services are started or stopped interactively by system...