Lucene search
K

881 matches found

CVE
CVE
added 2021/01/27 7:3 p.m.62 views

CVE-2021-22641

CVE-2021-22641 is a heap-based buffer overflow vulnerability in Fuji Electric Tellus Lite V-Simulator and V-Server Lite, prior to version 4.0.10.0. The issue arises in how project files are processed, allowing an attacker to craft a special project file that may lead to arbitrary code execution w...

7.8CVSS7.9AI score0.02065EPSS
Exploits1References2Affected Software2
CVE
CVE
added 2021/01/27 7:1 p.m.64 views

CVE-2021-22653

CVE-2021-22653 describes multiple out-of-bounds write vulnerabilities in Fuji Electric Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0) triggered by processing project files. Root cause: out-of-bounds write in the handling of project files could permit arbitrary code executi...

7.8CVSS8AI score0.01191EPSS
Exploits0References1Affected Software2
CNNVD
CNNVD
added 2021/01/26 12:0 a.m.5 views

Fuji Electric Tellus Lite V-Simulator 和 Fuji Electric V-Server Lite 缓冲区错误漏洞

Fuji Electric Tellus Lite V-Simulator and Fuji Electric V-Server Lite are both products of Fuji Electric Japan.Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments. Fuji Electric V-Server Lite is a remote monitoring software for industrial environments...

7.8CVSS6.3AI score0.01858EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/01/26 12:0 a.m.4 views

Fuji Electric Tellus Lite V-Simulator 和 Fuji Electric V-Server Lite 缓冲区错误漏洞

Fuji Electric Tellus Lite V-Simulator and Fuji Electric V-Server Lite are both products of Fuji Electric Japan.Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments. Fuji Electric V-Server Lite is a remote monitoring software for industrial environments...

7.8CVSS6.1AI score0.01191EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/01/26 12:0 a.m.6 views

Fuji Electric Tellus Lite V-Simulator和Fuji Electric V-Server Lite 缓冲区错误漏洞

Fuji Electric Tellus Lite V-Simulator and Fuji Electric V-Server Lite are both products of Fuji Electric Japan.Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments. Fuji Electric V-Server Lite is a remote monitoring software for industrial environments...

7.8CVSS6.3AI score0.02065EPSS
Exploits1References5
ICS
ICS
added 2021/01/26 12:0 a.m.58 views

Fuji Electric Tellus Lite V-Simulator and V-Server Lite

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Fuji Electric Equipment: Tellus Lite V-Simulator and V-Server Lite Vulnerabilities: Stack-based Buffer Overflow, Out-of-Bounds Read, Out-of-Bounds Write, Access of Uninitialized Pointer, Heap-based Buffer Overflow 2...

7.8CVSS8.5AI score0.02142EPSS
Exploits1References5
OSV
OSV
added 2021/01/11 7:15 p.m.3 views

CVE-2020-13559

A denial-of-service vulnerability exists in the traffic-logging functionality of FreyrSCADA IEC-60879-5-104 Server Simulator 21.04.028. A specially crafted packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability...

7.5CVSS5.8AI score0.01318EPSS
Exploits1References1
NVD
NVD
added 2021/01/11 7:15 p.m.8 views

CVE-2020-13559

A denial-of-service vulnerability exists in the traffic-logging functionality of FreyrSCADA IEC-60879-5-104 Server Simulator 21.04.028. A specially crafted packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability...

7.5CVSS6.1AI score0.01318EPSS
Exploits1References1
Prion
Prion
added 2021/01/11 7:15 p.m.16 views

Denial of service

A denial-of-service vulnerability exists in the traffic-logging functionality of FreyrSCADA IEC-60879-5-104 Server Simulator 21.04.028. A specially crafted packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability...

5CVSS7.3AI score0.01318EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/01/11 6:52 p.m.18 views

CVE-2020-13559

A denial-of-service vulnerability exists in the traffic-logging functionality of FreyrSCADA IEC-60879-5-104 Server Simulator 21.04.028. A specially crafted packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability...

5.9CVSS7.3AI score0.01318EPSS
Exploits1References1
CVE
CVE
added 2021/01/11 6:52 p.m.60 views

CVE-2020-13559

CVE-2020-13559 affects FreyrSCADA IEC-60879-5-104 Server Simulator 21.04.028, where the vulnerability lies in the server’s traffic-logging functionality. A specially crafted packet can trigger a denial-of-service condition, potentially impacting availability. Public metrics include CVSS v3.1 base...

7.5CVSS7.3AI score0.01318EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2021/01/11 12:0 a.m.7 views

Duplicate numbering

Freyrscada IEC-60879-5-104 Server Simulator is a software from Freyrscada India for simulating communication between IEDs and RTUs over TCP. The software is written in C for all POSIX compliant operating systems and supports single server simulation with multiple workstations. "Obsolete" Do not u...

7.5CVSS6.5AI score0.01318EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/01/11 12:0 a.m.4 views

Freyrscada IEC-60879-5-104 Server Simulator Security Vulnerability

Freyrscada IEC-60879-5-104 Server Simulator is a software from Freyrscada India for simulating communication between IEDs and RTUs over TCP. The software is written in C for all POSIX compliant operating systems and supports single server simulation of multiple workstation functionality. A securi...

7.5CVSS6.6AI score0.01318EPSS
Exploits1References2
Talos
Talos
added 2021/01/11 12:0 a.m.53 views

FreyrSCADA IEC-60879-5-104 server simulator traffic logging denial-of-service vulnerability

Summary A denial-of-service vulnerability exists in the traffic-logging functionality of FreyrSCADA IEC-60879-5-104 Server Simulator 21.04.028. A specially crafted packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability. Tested Versions FreyrSCA...

7.2AI score
Exploits0
Talos
Talos
added 2020/12/08 12:0 a.m.244 views

Schneider Electric EcoStruxure Control Expert PLC Simulator Modbus message processing remote code execution vulnerability

Summary A code execution vulnerability exists in the Modbus message-processing functionality of Schneider Electric EcoStruxure Control Expert PLC Simulator 14.1. A specially crafted network request can lead to remote code execution. An attacker can send a large Modbus request to trigger this...

7.5CVSS8.1AI score0.01882EPSS
Exploits1
CNVD
CNVD
added 2020/11/20 12:0 a.m.5 views

Schneider Electric EcoStruxure Control Expert Command Execution Vulnerability

Schneider Electric EcoStruxure Control Expert is the universal programming, commissioning and operating software for the Modicon M340, M580, M580S, Premium, Momentum and Quantum series. A command execution vulnerability exists in Schneider Electric EcoStruxure Control Expert. The vulnerability...

8.8CVSS7.3AI score0.01129EPSS
Exploits0References1
CNVD
CNVD
added 2020/11/20 12:0 a.m.2 views

Schneider Electric EcoStruxure Control Expert Incorrect Authorization Vulnerability

Schneider Electric EcoStruxure Control Expert is the universal programming, commissioning and operating software for the Modicon M340, M580, M580S, Premium, Momentum and Quantum series. An incorrect authorization vulnerability exists in PLC Simulator in Schneider Electric EcoStruxure Control...

7.8CVSS7.1AI score0.00323EPSS
Exploits0References1
CNVD
CNVD
added 2020/11/20 12:0 a.m.6 views

Unspecified Vulnerability in Schneider Electric EcoStruxure Control Expert

EcoStruxure Control Expert is the universal programming, debugging and operating software for the Modicon M340, M580, M580S, Premium, Momentum and Quantum series. A security vulnerability exists in PLC Simulator in EcoStruxure Control Expert. The vulnerability can be exploited by an attacker to...

9.8CVSS7.2AI score0.02642EPSS
Exploits0References1
NVD
NVD
added 2020/11/19 10:15 p.m.30 views

CVE-2020-7559

A CWE-120: Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability exists in PLC Simulator on EcoStruxureª Control Expert now Unity Pro all versions that could cause a crash of the PLC simulator present in EcoStruxureª Control Expert software when receiving a specially...

7.5CVSS7.5AI score0.01882EPSS
Exploits1References2
NVD
NVD
added 2020/11/19 10:15 p.m.14 views

CVE-2020-28212

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC Simulator on EcoStruxureª Control Expert now Unity Pro all versions that could cause unauthorized command execution when a brute force attack is done over Modbus...

9.8CVSS9.6AI score0.02642EPSS
Exploits0References1
Rows per page
Query Builder