Android WiFi-Direct Denial Of Service

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Android WiFi-Direct Denial of Service 1. Advisory Information Title: Android WiFi-Direct Denial of Service Advisory ID: CORE-2015-0002 Advisory URL: http://www.coresecurity.com/advisories/android-wifi-direct-denial-service Date...

Siemens SIMATIC WinCC Sm@rtClient app information disclosure vulnerability (CNVD-2015-00426)

Siemens SIMATIC WinCC is the monitoring control and data acquisition SCADA and HMI system. An information disclosure vulnerability exists in the Siemens SIMATIC WinCC Sm@rtClient app prior to version 1.0.2, which allows an attacker to extract passwords from srage via an unspecified vector...

CVE-2014-5233

The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to discover Sm@rtServer credentials by leveraging an error in the credential-processing mechanism...

Design/Logic Flaw

The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows local users to bypass an intended application-password requirement by leveraging the running of the app in the background state...

Code injection

The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to discover Sm@rtServer credentials by leveraging an error in the credential-processing mechanism...

CVE-2014-5231

The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to extract the password from storage via unspecified vectors...

CVE-2014-5232

Siemens SIMATIC WinCC Sm@rtClient for iOS is vulnerable prior to version 1.0.2 due to insufficiently protected credentials and improper authentication. When the app resumes from the background, an attacker with local access could bypass the required application password, potentially gaining acces...

CVE-2014-5231

Siemens SIMATIC WinCC Sm@rtClient for iOS (pre-1.0.2) is affected by CVE-2014-5231. The issue stems from Insufficiently Protected Credentials (CWE-522): the app stores its password in storage in a way that could allow a local attacker with physical access to extract it. The ICS advisory notes loc...

CVE-2014-5233

Siemens SIMATIC WinCC Sm@rtClient for iOS (pre-1.0.2) has an information-credential flaw: an error in the credential-processing/handling allows a physically proximate attacker with local access to extract Sm@rtServer credentials. The issue is tied to the app’s credential-storage/processing mechan...

CVE-2014-5232

The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows local users to bypass an intended application-password requirement by leveraging the running of the app in the background state...

PT-2015-3790

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC Sm@rtClient app versions prior to 1.0.2 Description The issue allows local users to bypass an intended application-password requirement. This is achieved by leveraging the running of the app in the background state...

CVE-2014-5231: Exposure of Sensitive Information to an Unauthorized Actor

The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to extract the password from storage via unspecified vectors...

CVE-2014-5232: Undefined Security Weakness

The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows local users to bypass an intended application-password requirement by leveraging the running of the app in the background state...

PT-2015-3791

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC Sm@rtClient app version 1.0.1 and earlier Description The issue allows physically proximate attackers to discover Sm@rtServer credentials due to an error in the credential-processing mechanism. Recommendations For version...

CVE-2014-5233: Exposure of Sensitive Information to an Unauthorized Actor

The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to discover Sm@rtServer credentials by leveraging an error in the credential-processing mechanism...

PT-2015-3789

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC Sm@rtClient app versions prior to 1.0.2 Description The issue allows physically proximate attackers to extract the password from storage. Recommendations For versions prior to 1.0.2, update to version 1.0.2 or later to...

SUSE-SU-2015:0928-1 Recommended update for sm-ncc-sync-data

This update for sm-ncc-sync-data contains the following changes: Add SUSE Cloud 4 channels. bnc883057 Fix parent label of the LTSS channel for SLMS...

CVE-2014-2634

HP Service Manager (SM) exposed vulnerability CVE-2014-2634 affecting SM versions 7.21 and 9.x prior to 9.34. The server component could be accessed in a way that bypasses intended access controls, allowing remote attackers to modify data or cause a denial of service via unspecified vectors. The ...

CVE-2013-6222

CVE-2013-6222 affects HP Service Manager (SM) Mobility Web Client and Service Request Catalog components. The XSS vulnerability exists in SM versions 7.21 and 9.x before 9.34, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. The HP security bulletin (HPSBMU03079)...

PT-2014-3202

Name of the Vulnerable Software and Affected Versions Bitrix Site Manager versions prior to 14.0.1 Description The issue allows remote attackers to bypass authentication via a brute force attack by guessing the BITRIX SM SALE UID cookie value, which uses sequential values. Recommendations For...