CVE-2020-14524

Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute arbitrary code...

Heap overflow

Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute arbitrary code...

Race condition

Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to uncontrolled resource consumption, which may allow an attacker to cause a denial-of-service condition...

CVE-2020-14524 Softing Industrial Automation OPC

Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute arbitrary code...

CVE-2020-14524

CVE-2020-14524 affects Softing Industrial Automation OPC: all versions prior to the latest build of 4.47.0 are vulnerable to a heap-based buffer overflow (CWE-122) that may allow remote code execution. CVSS v3 base score 9.8 (CRITICAL) with NETWORK attack vector, no privileges, no user interactio...

CVE-2020-14522 Softing Industrial Automation OPC

Softing Industrial Automation all versions prior to the latest build of version 4.47.0, The affected product is vulnerable to uncontrolled resource consumption, which may allow an attacker to cause a denial-of-service condition...

CVE-2020-14522

CVE-2020-14522 affects Softing Industrial Automation OPC products: all versions prior to the latest build of 4.47.0 are vulnerable to uncontrolled resource consumption that can lead to a denial-of-service. Affected component is OPC servers/services; root cause described as uncontrolled resource c...

Softing Industrial Automation OPC

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Softing Industrial Automation, GmbH Equipment: OPC Vulnerabilities: Heap-based Buffer Overflow, Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of these vulnerabilities...

Softing uaGate SI Default Privileges Vulnerability

Softing uaGate SI is a compact industrial gateway product from Softing Germany. A security vulnerability exists in Softing uaGate SI version 1.60.01. The vulnerability can be exploited by an attacker to modify or add executable files in the system default path...

Softing uaGate SI Elevation of Privilege Vulnerability

Softing uaGate SI is a compact industrial gateway product from Softing Germany. An elevation of privilege vulnerability exists in the maintenance script in Softing uaGate SI version 1.60.01, which can be exploited by an attacker to write to a file with superuser privileges...

Softing uaGate SI Command Injection Vulnerability

Softing uaGate SI is a compact industrial gateway product from Softing Germany. A command injection vulnerability exists in the CGI script in Softing uaGate SI version 1.60.01, which can be exploited by an attacker to execute illegal commands...

Softing uaGate SI, uaGate MB and uaGate 840D Command Injection Vulnerabilities

Softing uaGate SI and others are products of Softing Germany.Softing uaGate SI is a compact industrial gateway.Softing uaGate 840D is an IoT gateway.Softing uaGate MB is a gateway for Modbus TCP controllers. A command injection vulnerability exists in the CGI scripts in the Softing uaGate SI,...

CVE-2019-15051

An issue was discovered in Softing uaGate SI, MB, 840D firmware through 1.71.00.1225. A CGI script is vulnerable to command injection via a maliciously crafted form parameter...

CVE-2019-11527

An issue was discovered in Softing uaGate SI 1.60.01. A CGI script is vulnerable to command injection with a maliciously crafted url parameter...

CVE-2019-15051

An issue was discovered in Softing uaGate SI, MB, 840D firmware through 1.71.00.1225. A CGI script is vulnerable to command injection via a maliciously crafted form parameter...

CVE-2019-11527

An issue was discovered in Softing uaGate SI 1.60.01. A CGI script is vulnerable to command injection with a maliciously crafted url parameter...

CVE-2019-11528

An issue was discovered in Softing uaGate SI 1.60.01. A system default path for executables is user writable...

CVE-2019-11528

An issue was discovered in Softing uaGate SI 1.60.01. A system default path for executables is user writable...

Default configuration

An issue was discovered in Softing uaGate SI 1.60.01. A system default path for executables is user writable...

Command injection

An issue was discovered in Softing uaGate SI, MB, 840D firmware through 1.71.00.1225. A CGI script is vulnerable to command injection via a maliciously crafted form parameter...