Firmware Version Change Detected (Low)

Changes in the controller firmware represent a major change in the behavior of the device and usually cause a temporary interruption of operations. An attacker could use firmware changes to add malicious code to the controller, causing it to perform harmful operations which are hard to detect. Th...

SUSE SLES15 / openSUSE 15 Security Update : govulncheck-vulndb (SUSE-SU-2025:1226-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:1226-1 advisory. - Update to version 0.0.20250409T170536 2025-04-09T17:05:36Z jscPED-11136 GO-2025-3591 GO-2025-3594 GO-2025-3598 GO-2025-3599 - Update to...

Hitachi Energy's RTU500 series NULL Pointer Deference (CVE-2024-10037)

A vulnerability exists in the RTU500 web server com- ponent that can cause a denial of service to the RTU500 CMU application if a specially crafted mes- sage sequence is executed on a WebSocket connec- tion. An attacker must be properly authenticated and the test mode function of RTU500 must be...

Hitachi Energy's RTU500 series Missing synchronization (CVE-2025-1445)

A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61850 TLS connection takes place in specific timing situations, when IEC61850 communication is active. Precondition is that IEC61850 as client or server are...

RHEL 9 : RHEL AI 1.5 hdf5 (RHSA-2025:3801)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3801 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the RHEL AI application image...

Zoom Client for Meetings < 6.3.10 Insecure Default Variable Initialization Vulnerability (ZSB-25014)

The version of Zoom Client for Meetings installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25014 advisory. - Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to...

Oracle Linux 9 : webkit2gtk3 (ELSA-2025-3713)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-3713 advisory. 2.48.1-1 - Update to 2.48.1 2.48.0-1 - Update to 2.48.0 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Photon OS 5.0: Python3 PHSA-2024-5.0-0434

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0434. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 40 : upx (2025-3f77ed652b)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-3f77ed652b advisory. 5.0.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...

Fedora 40 : matrix-synapse (2025-cef83410f7)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-cef83410f7 advisory. Backport fixes from v1.127.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...

Photon OS 5.0: Mariadb PHSA-2024-5.0-0428

An update of the mariadb package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0428. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 41 : qgis (2025-ccb6313749)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ccb6313749 advisory. Fix CVE-2024-55565. ---- Update to 3.40.5. ---- Update to 3.40.4. Tenable has extracted the preceding description block directly from the Fedora security...

Photon OS 5.0: Postgresql14 PHSA-2025-5.0-0490

An update of the postgresql14 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0490. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Microhard 3G/4G Cellular Ethernet and Serial Gateway External Control of File Name or Path (ZSL-2018-5484)

The system backup configuration file 'IPn4G.config' in '/' directory or its respective name based on the model name including the similar files in '/www/cgi-bin/system.conf', '/tmp' and the cli.conf in '/etc/mcli/' can be downloaded by an authenticated attacker in certain circumstances. This will...

RHEL 8 : thunderbird (RHSA-2025:2960)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:2960 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Memory safety bugs fixed in Firefox 136...

Tenable Nessus Agent Privilege Escalation Vulnerability (TNS-2025-02, TNS-2025-03)

Tenable Nessus Agent is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

FreeBSD : chromium -- multiple security fixes (9456d4e9-055f-11f0-85f3-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9456d4e9-055f-11f0-85f3-a8a1599412c6 advisory. Chrome Releases reports: This update includes 2 security fixes: Tenable has extracted the preceding...

Tenable Nessus Agent < 10.7.4 / 10.8.x < 10.8.3 Privilege Escalation (TNS-2025-02 & TNS-2025-03)

According to its self-reported version, the Tenable Nessus Agent running on the remote Windows host is prior to 10.7.4 or 10.8.x prior to 10.8.3. It is, therefore, affected by a privilege escalation vulnerability as outlined in the TNS-2025-02 & TNS-2025-03 advisories when installed on a...

Schneider Electric Discontinued Devices Detection

The current plugin identifies Schneider devices that are currently discontinued. Schneider Lifecycle Statuses: - Active: Most current offering within a product category. - End of Life: Discontinued date announced - actively execute migrations and last time buys. Product generally orderable until...

Schneider Electric Active Devices Detection

The current plugin identifies Schneider devices that are still under active support. Schneider Lifecycle Statuses: - Active: Most current offering within a product category. - End of Life: Discontinued date announced - actively execute migrations and last time buys. Product generally orderable...