CherryCoinFoundation Digital Error Vulnerability

CherryCoinFoundation is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in CherryCoinFoundation's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

Security Advisory - Information Exposure Vulnerability in Some Huawei Smart Phones

There is an information exposure vulnerability in some Huawei smart phones. The system does not properly authenticate the application that access a specified interface. Attackers can trick users into installing malicious software to exploit this vulnerability and obtain some information about the...

Coinquer Digital Error Vulnerability

Coinquer is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in Coinquer's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

LoliCoin Digital Error Vulnerability

LoliCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in LoliCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

SQL Injection Vulnerability in iSchool Smart Campus Integrated Management Platform

Orient Boguan Beijing Technology Co., Ltd. is a high-tech enterprise. There is a SQL injection vulnerability in the iSchool Smart Campus Integrated Management Platform, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2020-9227

Huawei Smart Phones Moana-AL00B with versions earlier than 10.1.0.166 have a missing initialization of resource vulnerability. An attacker tricks the user into installing then running a crafted application. Due to improper initialization of specific parameters, successful exploit of this...

Design/Logic Flaw

Huawei Smart Phones Moana-AL00B with versions earlier than 10.1.0.166 have a missing initialization of resource vulnerability. An attacker tricks the user into installing then running a crafted application. Due to improper initialization of specific parameters, successful exploit of this...

CVE-2020-9227

CVE-2020-9227 affects Huawei Moana-AL00B smartphones with firmware older than 10.1.0.166, due to missing initialization of resources from improper parameter initialization. This may allow an attacker to trick a user into installing and executing a crafted app, potentially causing device exception...

CVE-2020-9227

Huawei Smart Phones Moana-AL00B with versions earlier than 10.1.0.166 have a missing initialization of resource vulnerability. An attacker tricks the user into installing then running a crafted application. Due to improper initialization of specific parameters, successful exploit of this...

Threat modelling and IoT hubs

IoT hubs are increasingly being used to provide a single point of access to the myriad of smart devices in the home. One ring to rule them all, if rather than multiple apps for different devices. When reviewing devices we often start with the single biggest security threat: unauthorised access to...

Siemens SICAM MMU, SGU and T Information Disclosure Vulnerabilities

SICAM T is a digital measurement sensor that allows the measurement of power in the non-electrical network in a single unit.ICAM-MMU Measurement and Monitoring Unit is a power monitoring unit that allows the measurement of power in the grid in a single unit.SICAM SGU Discontinued is a Smart Grid...

Siemens SICAM MMU, SGU and T Cross-Site Scripting Vulnerabilities

SICAM T is a digital measurement sensor that allows the measurement of power in the non-electrical network in a single unit.ICAM-MMU Measurement and Monitoring Unit is a power monitoring unit that allows the measurement of power in the grid in a single unit.SICAM SGU Discontinued is a Smart Grid...

Siemens SICAM MMU, SGU and T Authentication Bypass Vulnerability

SICAM T is a digital measurement sensor that allows the measurement of power in the non-electrical network in a single unit.ICAM-MMU Measurement and Monitoring Unit is a power monitoring unit that allows the measurement of power in the grid in a single unit.SICAM SGU Discontinued is a Smart Grid...

Security Advisory - Stack Overflow Vulnerability in Huawei Smart Phone Product

There is a stack overflow vulnerability in some Huawei smart phone. An attacker can craft specific packet to exploit this vulnerability. Due to insufficient verification, this could be exploited to tamper with the information to affect the availability. Vulnerability ID: HWPSIRT-2019-11030 This...

Siemens SICAM MMU, SGU and T Sensitive Information Disclosure Vulnerability

SICAM T is a digital measurement sensor that allows the measurement of power in the non-electrical network in a single unit.ICAM-MMU Measurement and Monitoring Unit is a power monitoring unit that allows the measurement of power in the grid in a single unit.SICAM SGU Discontinued is a Smart Grid...

CVE-2020-7584

A vulnerability has been identified in SIMATIC S7-200 SMART CPU family All versions = V2.2 V2.5.1. Affected devices do not properly handle large numbers of new incomming connections and could crash under certain circumstances. An attacker may leverage this to cause a Denial-of-Service situation...

CVE-2020-7584

A vulnerability has been identified in SIMATIC S7-200 SMART CPU family All versions = V2.2 V2.5.1. Affected devices do not properly handle large numbers of new incomming connections and could crash under certain circumstances. An attacker may leverage this to cause a Denial-of-Service situation...

CVE-2020-7584

A vulnerability has been identified in SIMATIC S7-200 SMART CPU family All versions = V2.2 V2.5.1. Affected devices do not properly handle large numbers of new incomming connections and could crash under certain circumstances. An attacker may leverage this to cause a Denial-of-Service situation...

CVE-2020-7584

The CVE-2020-7584 issue affects Siemens SIMATIC S7-200 SMART CPU family (versions >= 2.2 and

Siemens SIMATIC S7-200 SMART CPU Family

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC S7-200 SMART CPU family Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause...