CVE-2020-5645

Session fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series GT1455-QTBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QMBDE CoreOS version "05.65.00.BD" and earlier, GT1450-QLBDE CoreOS version "05.65.00.BD" and earlier, GT1455HS-QTBDE CoreOS...

CVE-2020-5658

Resource Management Errors vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before,...

Siemens S7-400 PLC has an industrial control device vulnerability

The S7-400 PLCs are programmable controllers for use in the mid- to high-grade performance range. A vulnerability exists in the Siemens S7-400 PLC for industrial control devices. An attacker can exploit the vulnerability to cause the control device to stop, the RUN light to go out, the STOP light...

Split-Second ‘Phantom’ Images Can Fool Tesla’s Autopilot

Researchers found they could stop a Tesla by flashing a few frames of a stop sign for less than half a second on an internet-connected billboard...

Healthcare security update: death by ransomware, what’s next?

A recent ransomware attack which played a significant role in the death of a German woman has put into focus both the dangers and the importance of cybersecurity today. But it has also led some to point fingers as to who was responsible. As usual, playing the blame game helps no one, but it does...

Denial of Service Vulnerability in Schneider PLC-M340

The Schneider-Electric M340 PLC is a high performance and stable controller for a wide range of industrial control applications. A denial of service vulnerability exists in the Schneider PLC-M340, which can be exploited by an attacker to cause the device's CPU RUN light to go out, the CPU module,...

Denial of Service Vulnerability in CSC-830 of Beijing Sifang Relay Automation Co. Ltd (CNVD-2020-59455)

CSC830 PLC is a compact controller for small and medium-sized discrete automation systems and stand-alone automation systems from Beijing Sifang Relay Automation Co. Beijing Sifang Relay Automation Co., Ltd CSC-830 has a denial of service vulnerability, which can be exploited by an attacker to...

Design/Logic Flaw

Multiple vulnerabilities in the Zone-Based Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload or stop forwarding traffic through the firewall. The vulnerabilities are due to incomplete handling of Layer 4 packets through the...

Security Bulletin: Publicly disclosed vulnerability from Kernel affects IBM Netezza Host Management

Summary Kernel is used by IBM Netezza Host Management. This bulletin provides mitigation for the reported CVE. Vulnerability Details CVEID: CVE-2019-18806 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a memory leak in the qlalloclargebuffers function in...

Denial of Service Vulnerability in Omron Small PLC Series CP1L

CP1L is Omron's compact PLC series, an all-in-one PLC with built-in pulse output, analog input/output, and serial communication functions. A denial of service vulnerability exists in the Omron compact PLC series CP1L, which can be exploited by an attacker to stop programs running on the device...

Mitsubishi PLC FX3U-32M suffers from a denial of service vulnerability (CNVD-2020-58825)

The FX3U series Mitsubishi PLC is the third generation of miniature programmable controllers. A denial of service vulnerability exists in the Mitsubishi PLC FX3U-32M, which can be exploited by an attacker to cause the device RUN light to go out and the output module to stop working...

Mail.ru: Наблюдатель может оставновить базу данных [mcs.mail.ru]

User with spectator role in mcs.mail.ru could request database stop operation...

CVE-2020-10049

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The start-stop scripts for the services of the affected application could allow a local attacker to include arbitrary commands that are executed when services are started or stopped interactively by system...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V2.10.2. The start-stop scripts for the services of the affected application could allow a local attacker to include arbitrary commands that are executed when services are started or stopped interactively by system...

Foxit Studio Photo < 3.6.6.925 Out-of-Bounds Read Vulnerability

According to its self-reported version, the Foxit Studio Photo application installed on the remote Windows host is affected by an out-of-bounds read error in the use of PNG files to improper validation of user-supplied data. An unauthenticated, remote attacker can exploit this, to disclose...

CentOS Web Panel Code Execution Vulnerability (CNVD-2020-43143)

CentOS Web Panel CWP is a free web hosting control panel that makes it easy to manage multiple servers Dedicated and VPS without having to access the servers via SSH. A code execution vulnerability in CentOS Web Panel version cwp-e17.0.9.8.923, which stems from the ajaxdashboard.php file not...

CVE-2020-15609

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxdashboard.php. When parsing the servicestop parameter, the proces...

OSV-2020-690 UNKNOWN READ in ot::Coap::CoapBase::RemoveResource

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13369 Crash type: UNKNOWN READ Crash state: ot::Coap::CoapBase::RemoveResource ot::MeshCoP::BorderAgent::Stop ot::Mle::Mle::SetStateDetached...

OSV-2020-369 UNKNOWN READ in ot::TimerScheduler::Remove

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13383 Crash type: UNKNOWN READ Crash state: ot::TimerScheduler::Remove ot::Mle::Mle::Stop otThreadSetEnabled...

CVE-2020-10276

The password for the safety PLC is the default and thus easy to find in manuals, etc.. This allows a manipulated program to be uploaded to the safety PLC, effectively disabling the emergency stop in case an object is too close to the robot. Navigation and any other components dependent on the las...