EUVD-2022-32676

Malicious code in bioql PyPI...

The vulnerability of the “Tekon” SCADA system, which exists due to the lack of measures to neutralize specific elements, allows for the execution of arbitrary codes.

The vulnerability of the “Tekon” SCADA system exists due to the lack of measures taken to neutralize its special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

The vulnerability of the “Tekon” SCADA system, related to the lack of authentication for critical functions, allows attackers to execute arbitrary codes and increase their privileges.

The vulnerability of the “Tekon” SCADA system is related to the lack of authentication for critical functions. Exploiting this vulnerability allows an intruder to execute arbitrary commands and increase their privileges...

The vulnerability of the “Tekon” SCADA system, related to the failure to implement protective measures for the SQL query structure, allows attackers to gain unauthorized access to protected information.

The vulnerability of the SCADA system “Tekon” is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the “Tekon” SCADA system, related to errors in access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the “Tekon” SCADA system, related to access control errors. Exploiting this vulnerability could allow an intruder operating remotely to gain unauthorized access to protected information...

The vulnerability of the “Tekon” SCADA system, which stems from the use of strictly encrypted account data, allows a intruder to enhance their privileges and execute arbitrary codes.

The vulnerability of the “Tekon” SCADA system is related to the use of strictly encrypted account data. Exploiting this vulnerability can allow a malicious actor to increase their privileges and execute arbitrary codes remotely...

The vulnerability of the “Tekon” SCADA system, related to the transmission of accounting data in unencrypted form, allows a perpetrator to carry out a MITM attack.

The vulnerability of the SCADA system “Tekon” is related to the transmission of accounting data in unencrypted form. Exploiting this vulnerability could allow a malicious actor to carry out a MITM attack...

CVE-2022-28223

Tekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to root by uploading a malicious Lua plugin...

PT-2024-41438 · Ооо 'Теконавтоматика' · Scada-Система 'Текон'

Уязвимость SCADA-системы «Текон», связанная с ошибками разграничения доступа. Эксплуатация уязвимости, может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...

PT-2024-41439 · Ооо 'Теконавтоматика' · Scada-Система 'Текон'

Уязвимость SCADA-системы «Текон», связанная с передачей учетных данных в незашифрованном виде. Эксплуатация уязвимости, может позволить нарушителю, действующему удаленно выполнить атаку «человек посередине» MITM...

CVE-2022-28223

Tekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to root by uploading a malicious Lua plugin...

CVE-2022-28223

Tekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to root by uploading a malicious Lua plugin...

CVE-2022-28223

Tekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to root by uploading a malicious Lua plugin...

Code injection

Tekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to root by uploading a malicious Lua plugin...

CVE-2022-28223

Tekon KIO devices (up to 2022-03-30) are affected. An authenticated admin can escalate to root by uploading a malicious Lua plugin , enabling privilege escalation with high impact. The documents do not specify exact affected versions/models, root-cause details, or a published fix. No exploitation...

CVE-2022-28223

Tekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to root by uploading a malicious Lua plugin...

Tekon KIO 代码问题漏洞

Tekon KIO is a controller from the Russian company Tekon. A security vulnerability exists in the Tekon KIO device that originates from allowing an authenticated administrator user to elevate privileges to root by uploading a malicious Lua plugin...

100s of Russian Building Controllers Can be Remotely Hacked

By Deeba Ahmed Researcher Jose Bertin has identified critical security vulnerabilities in a building controller made by Russian firm Tekon Avtomatika… This is a post from HackRead.com Read the original post: 100s of Russian Building Controllers Can be Remotely Hacked...