Motorola Solutions MDLC

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely Vendor: Motorola Solutions Equipment: MDLC Vulnerabilities: Use of a Broken or Risky Cryptographic Algorithm, Plaintext Storage of a Password CISA is aware of a public report, known as “OT:ICEFALL” that details vulnerabilities found...

Motorola Solutions MOSCAD IP Gateway和ACE IP Gateway 访问控制错误漏洞

The Motorola Solutions MOSCAD IP Gateway and Motorola Solutions ACE IP Gateway are both products of Motorola Solutions, Inc. A series of IP gateways. Use OPC to remotely and locally monitor, detect, alert, and protect any site.Motorola Solutions ACE IP Gateway is a series of IP gateways. An acces...

Motorola Solutions MDLC 安全漏洞

Motorola Solutions MDLC is a data communication protocol from Motorola Solutions. A security vulnerability exists in Motorola Solutions MDLC, which arises from the application driver storing passwords in plaintext in the wmdlcdrv.ini driver configuration file...

What Are Shadow IDs, and How Are They Crucial in 2022?

Just before last Christmas, in a first-of-a-kind case, JPMorgan was fined $200M for employees using non-sanctioned applications for communicating about financial strategy. No mention of insider trading, naked shorting, or any malevolence. Just employees circumventing regulation using, well, Shado...

CVE-2022-28620

CVE-2022-28620 is a remote authentication bypass affecting HPE Cray Legacy Shasta System Solutions, HPE Slingshot, and HPE Cray EX supercomputers. Affected firmware/versions include: node controller firmware for HPE Cray EX liquid-cooled blades; chassis controller firmware in HPE Cray EX liquid-c...

nettosolutions.com Cross Site Scripting vulnerability OBB-2671922

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-28620: Undefined Security Weakness

A remote authentication bypass vulnerability was discovered in HPE Cray Legacy Shasta System Solutions; HPE Slingshot; and HPE Cray EX supercomputers versions: Prior to node controller firmware associated with HPE Cray EX liquid cooled blades, and all versions of chassis controller firmware...

coloradospacesolutions.com Cross Site Scripting vulnerability OBB-2668109

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

EtherNet/IP Adapter 和 EtherNet/IP Scanner 缓冲区错误漏洞

The EtherNet/IP Adapter is a development kit and tool from Pyramid Solutions.EtherNet/IP Scanner is a scanner software. It provides I/O server and I/O client, message server and message client functionality, and an application programming interface. A buffer error vulnerability exists in the...

Natural Language Processing and “Mindful” AI Drive More Sophisticated Bad Bot Attacks

The evolution from human to bot attacks Over the last several years of my career in cyber security, I have been fortunate to work with professionals who researched and developed new cyber security detection and prevention solutions that block high-end cyber attacks. Initially, these attacks were...

CISA Releases Security Advisories Related to OT:ICEFALL (Insecure by Design) Report

CISA is aware that Forescout researchers have released OT:ICEFALL, a report on 56 vulnerabilities caused by insecure-by-design practices in operational technology across multiple vendors. The vulnerabilities are divided into four main categories: insecure engineering protocols, weak cryptography ...

The Inevitable Need for Advanced Vulnerability Management

We have read enough and more news in recent times on the surge in cyberattacks. It is crystal clear that attackers are not leaving out even the tiniest of security loopholes and are coming up with smarter ways to invade our IT network. Vulnerability management is the most crucial cyber defense...

Malicious code in aws-solutions-constructs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d87219753522203f4379f860232eca25a18796c1ba879d9b3eca269fbd762c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1203 Malicious code in aws-solutions-constructs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d87219753522203f4379f860232eca25a18796c1ba879d9b3eca269fbd762c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Why Paper Receipts are Money at the Drive-Thru

Check out this handmade sign posted to the front door of a shuttered Jimmy Johns sandwich chain shop in Missouri last week. See if you can tell from the store owners message what happened. If you guessed that someone in the Jimmy Johns store might have fallen victim to a Business Email Compromise...

7 Facts About Insider Threats That Should Make you Rethink Data Security

In the report, Insider Threats Drive Data Protection Improvements, Forrester Research asserts that most organizations are making positive steps toward protecting the sensitive data they are migrating to the cloud. However, Forrester suggests that many have not devised a comprehensive plan that...

HPESBCR04284 rev.1 - HPE Cray EX Supercomputers, Cray Shasta System Solutions, and HPE Slingshot Switches, Remote Authentication Bypass

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Cray Legacy Shasta System Solutions - All versions of node controller firmware associated with HPE Cray EX liquid cooled blades, and all versions of chassis controller firmware...

Comprehensive, Easy Cybersecurity for Lean IT Security Teams Starts with XDR

Breaches don't just happen to large enterprises. Threat actors are increasingly targeting small businesses. In fact, 43% of data breaches involved small to medium-sized businesses. But there is a glaring discrepancy. Larger businesses typically have the budget to keep their lights on if they are...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - January 2022 - Includes Oracle January 2022 CPU

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 7, and 8 that are used by Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas and Maximo for...

Solutions Atlantic Regulatory Reporting System Cross-Site Scripting Vulnerability

Solutions Atlantic Regulatory Reporting System is a flagship regulatory reporting system from Solutions Atlantic, Inc. Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to a cross-site scripting vulnerability that could be exploited to execute JavaScript code...